%0 Conference Proceedings %T JIT Compiler Security through Low-Cost RISC-V Extension %+ Equipe Hardware ARchitectures and CAD tools (Lab-STICC_ARCAD) %+ École Nationale Supérieure de Techniques Avancées Bretagne (ENSTA Bretagne) %A Ducasse, Quentin %A Cotret, Pascal %A Lagadec, Loïc %< avec comité de lecture %( 30th Reconfigurable Architectures Workshop %B 30th Reconfigurable Architectures Workshop %C St Petersburg (Florida), United States %8 2023-05-15 %D 2023 %Z Computer Science [cs]/Cryptography and Security [cs.CR]Conference papers %X Language Virtual Machines (VM) need to be extremely efficient and hence use complex engines such as a JIT compiler to speed up the usual bytecode interpretation loop. Their usage of low-level and security-critical tasks make them targets of choice. Enforcing low-cost fine-grained memory isolation has been an important research focus as a countermeasure to the most advanced JIT attacks. Memory isolation splits the components of an application with controlled communication and verified access to other resources. We present how custom instructions linked to hardware-enforced domain-checking could protect JIT code and data. We present incremental solutions and their corresponding custom instructions. The generated machine code and extended RISC-V Rocket come at a low-cost both in performance and intrusiveness. %G English %2 https://hal.science/hal-04031296/document %2 https://hal.science/hal-04031296/file/main.pdf %L hal-04031296 %U https://hal.science/hal-04031296 %~ UNIV-BREST %~ INSTITUT-TELECOM %~ ENSTA-BRETAGNE %~ CNRS %~ UNIV-UBS %~ ENSTA-BRETAGNE-STIC %~ ENIB %~ LAB-STICC %~ INSTITUTS-TELECOM %~ LAB-STICC_ARCAD %~ LAB-STICC_SHARP