Proceedings of the Korea Information Processing Society Conference (한국정보처리학회:학술대회논문집)

  • 2021.05a
  • /
  • Pages.151-154
  • /
  • 2021
  • /
  • 2005-0011(pISSN)
  • /
  • 2671-7298(eISSN)
Korea Information Processing Society (한국정보처리학회)
권호 표지
DOI QR코드

DOI QR Code

A Study on Security Issues Due to Foreign Function Interface in Rust

Rust 언어의 FFI로 인한 취약에 대한 연구

  • Martin, Kayondo (Department of Electrical and Computer Engineering and Inter-University Semiconductor Research Center, Seoul National University) ;
  • Bang, In-Young (Department of Electrical and Computer Engineering and Inter-University Semiconductor Research Center, Seoul National University) ;
  • You, Jun-Seung (Department of Electrical and Computer Engineering and Inter-University Semiconductor Research Center, Seoul National University) ;
  • Seo, Ji-Won (Department of Electrical and Computer Engineering and Inter-University Semiconductor Research Center, Seoul National University) ;
  • Paek, Yun-Heung (Department of Electrical and Computer Engineering and Inter-University Semiconductor Research Center, Seoul National University)
  • 카욘도 마틴 (서울대학교 전기정보학부, 반도체 공동연구소) ;
  • 방인영 (서울대학교 전기정보학부, 반도체 공동연구소) ;
  • 유준승 (서울대학교 전기정보학부, 반도체 공동연구소) ;
  • 서지원 (서울대학교 전기정보학부, 반도체 공동연구소) ;
  • 백윤흥 (서울대학교 전기정보학부, 반도체 공동연구소)
  • Published : 2021.05.12
Download PDF
⟨ Previous Next ⟩

Abstract

Rust is a promising system programming language that made its debut in 2010. It was developed to address the security problems in C/C++. It features a property called ownership, on which it relies to mitigate memory attacks. For this and its many other features, the language has consistently gained popularity and many companies have begun to seriously consider it for production uses. However, Rust also supports safe and unsafe regions under which the foreign function interface (FFI), used to port to other languages, falls. In the unsafety region, Rust surrenders most of its safety features, allowing programmers to perform operations without check. In this study, we analyze the security issues that arise due to Rust's safety/unsafety property, especially those introduced by Rust FFI.

Keywords

Acknowledgement

This work was supported by the National Research Foundation of Korea (NRF) grant funded by the Korean government (MSIT) (NRF-2020R1A2B5B03095204) and the BK21 FOUR program of the Education and Research Program for Future ICT Pioneers, Seoul National University in 2021.