• Title/Summary/Keyword: 간접 분기

Search Result 14, Processing Time 0.021 seconds

Accurate Prediction of Polymorphic Indirect Branch Target (간접 분기의 타형태 타겟 주소의 정확한 예측)

  • 백경호;김은성
    • Journal of the Institute of Electronics Engineers of Korea CI
    • /
    • v.41 no.6
    • /
    • pp.1-11
    • /
    • 2004
  • Modern processors achieve high performance exploiting avaliable Instruction Level Parallelism(ILP) by using speculative technique such as branch prediction. Traditionally, branch direction can be predicted at very high accuracy by 2-level predictor, and branch target address is predicted by Branch Target Buffer(BTB). Except for indirect branch, each of the branch has the unique target, so its prediction is very accurate via BTB. But because indirect branch has dynamically polymorphic target, indirect branch target prediction is very difficult. In general, the technique of branch direction prediction is applied to indirect branch target prediction, and much better accuracy than traditional BTB is obtained for indirect branch. We present a new indirect branch target prediction scheme which combines a indirect branch instruction with its data dependent register of the instruction executed earlier than the branch. The result of SPEC benchmark simulation which are obtained on SimpleScalar simulator shows that the proposed predictor obtains the most perfect prediction accuracy than any other existing scheme.

Effective Comparison of Indirect Branch Addresses for Checking Control-flow Integrity (제어 흐름 무결성 검증을 위한 간접 분기 주소의 효과적인 비교)

  • Kim, Tae-Hwan;Seong, In-Hyeong;Han, Kyung-Sook;Pyo, Chang-Woo
    • Proceedings of the Korean Information Science Society Conference
    • /
    • 2012.06a
    • /
    • pp.86-88
    • /
    • 2012
  • 코드 포인터 공격을 이용한 제어 흐름은 실행 중에 간접 분기의 무결성을 검사하는 것으로 보호할 수 있다. 간접 분기는 반복되는 목적지 주소로의 분기인 경우가 많지만, 목적지 주소는 실행 시간에만 알 수 있기 때문에 여러 가지 예외적인 상황을 적절히 대처할 방법이 필요하다. 본 논문에서는 동적 이진 계측화를 활용하여 실행 중 발생하는 간접 분기를 분석하고, 수집한 주소들을 빠르게 비교하는데 효과적인 주소 비교 기법들을 제시한다. 또한 각 기법을 비교하여 프로그램에 따라 주소 비교의 효율성을 극대화하는 방안을 모색하였다. 이러한 기법을 통해 간접 분기가 야기하는 여러 문제점에서부터 보안 분야에 이르기 까지 활용 범위를 넓힐 수 있을 것으로 기대한다.

Efficient Indirect Branch Predictor Based on Data Dependence (효율적인 데이터 종속 기반의 간접 분기 예측기)

  • Paik Kyoung-Ho;Kim Eun-Sung
    • Journal of the Institute of Electronics Engineers of Korea CI
    • /
    • v.43 no.4 s.310
    • /
    • pp.1-14
    • /
    • 2006
  • The indirect branch instruction is a most substantial obstacle in utilizing ILP of modem high performance processors. The target address of an indirect branch has the polymorphic characteristic varied dynamically, so it is very difficult to predict the accurate target address. Therefore the performance of a processor with speculative methodology is reduced significantly due to the many execution cycle delays in occurring the misprediction. We proposed the very accurate and novel indirect branch prediction scheme so called data-dependence based prediction. The predictor results in the prediction accuracy of 98.92% using 1K entries, and. 99.95% using 8K But, all of the proposed indirect predictor including our predictor has a large hardware overhead for restoring expected target addresses as well as tags for alleviating an aliasing. Hence, we propose the scheme minimizing the hardware overhead without sacrificing the prediction accuracy. Our experiment results show that the hardware is reduced about 60% without the performance loss, and about 80% sacrificing only the performance loss of 0.1% in aspect of the tag overhead. Also, in aspect of the overhead of storing target addresses, it can save the hardware about 35% without the performance loss, and about 45% sacrificing only the performance loss of 1.11%.

Indirect Branch Target Address Verification for Defense against Return-Oriented Programming Attacks (Return-Oriented Programming 공격 방어를 위한 간접 분기 목적 주소 검증 기법)

  • Park, Soohyun;Kim, Sunil
    • KIPS Transactions on Computer and Communication Systems
    • /
    • v.2 no.5
    • /
    • pp.217-222
    • /
    • 2013
  • Return-Oriented Programming(ROP) is an advanced code-reuse attack like a return-to-libc attack. ROP attacks combine gadgets in program code area and make functions like a Turing-complete language. Some of previous defense methods against ROP attacks show high performance overhead because of dynamic execution flow analysis and can defend against only certain types of ROP attacks. In this paper, we propose Indirect Branch Target Address Verification (IBTAV). IBTAV detects ROP attacks by checking if target addresses of indirect branches are valid. IBTAV can defends against almost all ROP attacks because it verifies a target address of every indirect branch instruction. Since IBTAV does not require dynamic execution flow analysis, the performance overhead of IBTAV is relatively low. Our evaluation of IBTAV on SPEC CPU 2006 shows less than 15% performance overhead.

A Development of Analytical Strategies for Elastic Bifurcation Buckling of the Spatial Structures (공간구조물의 탄성 분기좌굴해석을 위한 수치해석 이론 개발)

  • Lee, Kyung Soo;Han, Sang Eul
    • Journal of Korean Society of Steel Construction
    • /
    • v.21 no.6
    • /
    • pp.563-574
    • /
    • 2009
  • This paper briefly describes the fundamental strategies--path-tracing, pin-pointing, and path-switching--in the computational elastic bifurcation theory of geometrically non-linear single-load-parameter conservative elastic spatial structures. The stability points in the non-linear elasticity may be classified into limit points and bifurcation points. For the limit points, the path tracing scheme that successively computes the regular equilibrium points on the equilibrium path, and the pinpointing scheme that precisely locates the singular equilibrium points were sufficient for the computational stability analysis. For the bifurcation points, however, a specific procedure for path-switching was also necessary to detect the branching paths to be traced in the post-buckling region. After the introduction, a general theory of elastic stability based on the energy concept was given. Then path tracing, an indirect method of detecting multiple bifurcation points, and path switching strategies were described. Next, some numerical examples of bifurcation analysis were carried out for a trussed stardome, and a pin-supported plane circular arch was described. Finally, concluding remarks were given.

The Ruling System of Silla to Gangneung Area Judged from Archaeological Resources in 5th to 6th Century (고고자료로 본 5~6세기 신라의 강릉지역 지배방식)

  • Shim, Hyun Yong
    • Korean Journal of Heritage: History & Science
    • /
    • v.42 no.3
    • /
    • pp.4-24
    • /
    • 2009
  • This paper examined archaeological resources that discuss how Silla entered the Gangneung area, the coastal region along the East Sea that has been excavated most actively. Silla expanded its territories while organizing the its system as an ancient state and acquired several independent townships in various regions, stretching its forces to the East Sea area faster than any other ancient states of the time. In particular, many early relics and heritages of Silla have been found in Gangneung, the center of the East Sea area. Many archaeological resources prove these circumstances of that time and provide brief texts that are valuable for our interpretation of historical facts. In this respect, it was possible for me to examine these resources to answer my question as to why early relics and heritages of Silla are found in the Gangneung area. Based on my research on Silla's advancement into the Gangneung area, I have acquired the following results: How did Silla rule this area after conquering Yeguk in the Gangneung area? After conquering the Gangneung area, Silla attempted an indirect ruling at first. Later, Silla adopted a direct ruling system. I divided the indirect ruling period into two phases: introduction and settlement. In detail, Silla's earthenware and stone chamber tombs first appeared in Hasi-dong in the fourth quarter of the 4th Century and the tombs spread to Chodang-dong in the second quarter of the 5th Century. A belt with dragon pattern openwork, which seems to be from the second quarter of the 5th Century, was found to tell us that the Gangneung region began receiving rewards from Silla during this time. Thus, the period from the fourth quarter of the 4th Century to the second quarter of the 5th Century is designated as the 1st Phase (Introduction) of indirect ruling in terms of aechaeological findings. This is when Silla was first advanced to the Gangneung area and tolerated independent administration of the conquered. In the third and fourth quarters of the 5th Century, old mound tombs appeared and burials of relics that symbolized power emerged. In the third quarter of the 5th Century, stone chamber tombs were prevalent, but wooden chamber tombs, stone mounded wooden chamber tombs, and lateral entrance stone chamber tombs began to emerge. Also, tombs that were clustered in Hasi-dong and Chodang-dong began to scatter to Byeongsan-dong, Yeongjin-ri, and Bangnae-ri nearby. Steel pots were the symbol of power that emerged at this time. In the fourth quarter of the 5th Century, stone chamber tombs were still dominating, but wooden chamber tombs, stone mounded wooden chamber tombs, and lateral entrance stone chamber tombs became more popular. More crowns, crown ornaments, big daggers, and belts were bestowed by Silla, mostly in Chodang-dong and Byeongsan-dong. The period from the third quarter to the fourth quarter of the 5th Century was designated as the 2nd Phase (Settlement) of indirect ruling in terms of aechaeological findings. At this time, Silla bestowed items of power to the ruling class of the Gangneung area and gave equal power to the rulers of Chodang-dong and Byeongsan-dong to keep them restrained by each other. However, Silla converted the ruling system to direct ruling once it recognized the Gangneung area as the base of its expedition of conquest to the north. In the first quarter of the 6th Century, old mound tombs disappeared and small/medium-sized mounds appeared in the western inlands and the northern areas. In this period, the tunnel entrance stone chamber tombs were large enough for people to enter with doors. A cluster of several tunnel entrance stone chamber tombs was formed in Yeongjin-ri and Bangnae-ri at this time, probably with the influence of Silla's direct ruling. In the first quarter of the 6th Century, Silla dispatched officers from the central government to complete the local administration system and replaced the ruling class of Chodang-dong and Byeongsan-dong with that of Silla-friendly Yeonjin-ri and Bangnae-ri to reorganize the local administration system and gain full control of the Gangneung area.

Prediction Accuracy Enhancement of Function Return Address via RAS Pollution Prevention (RAS 오염 방지를 통한 함수 복귀 예측 정확도 향상)

  • Kim, Ju-Hwan;Kwak, Jong-Wook;Jhang, Seong-Tae;Jhon, Chu-Shik
    • Journal of the Institute of Electronics Engineers of Korea CI
    • /
    • v.48 no.3
    • /
    • pp.54-68
    • /
    • 2011
  • As the prediction accuracy of conditional branch instruction is increased highly, the importance of prediction accuracy for unconditional branch instruction is also increased accordingly. Except the case of RAS(Return Address Stack) overflow, the prediction accuracy of function return address should be 100% theoretically. However, there exist some possibilities of miss-predictions for RAS return addresses, when miss-speculative execution paths are invalidated, in case of modern speculative microprocessor environments. In this paper, we propose the RAS rename technique to prevent RAS pollution, results in the reduction of RAS miss-prediction. We divide a RAS stack into a soft-stack and a hard-stack and we handle the instructions for speculative execution in the soft-stack. When some overwrites happen in the soft-stack, we move the soft-stack data into the hard-stack. In addition, we propose an enhanced version of RAS rename scheme. In simulation results, our solution provide 1/90 reduction of miss-prediction of function return address, results in up to 6.85% IPC improvement, compared to normal RAS method. Furthermore, it reduce miss-prediction ratio as 1/9, compared to previous technique.

Design of Accurate and Efficient Indirect Branch Predictor (정확하고 효율적인 간접 분기 예측기 설계)

  • Paik, Kyoung-Ho;Kim, Eun-Sung
    • Proceedings of the IEEK Conference
    • /
    • 2005.11a
    • /
    • pp.1083-1086
    • /
    • 2005
  • Modern superscalar processors exploit Instruction Level Parallelism to achieve high performance by speculative techniques such as branch prediction. The indirect branch target prediction is very difficult compared to the prediction of direct branch target and branch direction, since it has dynamically polymorphic target. We present a accurate and hardware-efficient indirect branch target predictor. It can reduce the tags which has to be stored in the Indirect Branch Target Cache without a sacrifice of the prediction accuracy. We implement the proposed scheme on SimpleScalar and show the efficiency running SPEC95 benchmarks.

  • PDF

The Enhancement of Indirect Branch Prediction Accuracy via Double Return Address Stack (이중 함수 복귀 스택의 활용을 통한 간접 분기 명령어의 예측 정확도 향상 기법)

  • Kwak, Jong-Wook;Kim, Ju-Hwan
    • Proceedings of the Korean Information Science Society Conference
    • /
    • 2011.06a
    • /
    • pp.494-497
    • /
    • 2011
  • 함수 복귀 예측은 이론적으로 오버플로가 발생하지 않는 한도 내에서 100%의 정확도를 보여야 한다. 하지만, 투기적 실행을 지원하는 현대 마이크로프로세서 환경 하에서는 잘못된 실행 경로로의 수행 결과를 무효화 할 때 RAS의 오염이 발생하며, 이는 함수 복귀 주소의 예측 실패로 이어진다. 본 논문에서는 이러한 RAS의 오염을 방지하기 위하여 RAS 재명명 기법을 제안한다. RAS 재명명 기법은 RAS의 스택을 소프트 스택과 하드 스택으로 나누어 관리한다. 소프트 스택은 투기적 실행에 의한 데이터의 변경을 복구할 수 있는 항목을 관리하고, 하드 스택은 소프트 스택의 크기 제한으로 겹쳐쓰기가 일어나는 데이터 가운데 이후에 재사용될 데이터를 관리하는 구조로 구성된다. 제안된 기법을 모의실험 한 결과, RAS 오염방지 기법이 적용되지 않은 시스템과 비교하여 함수 복귀 예측 실패를 약 1/90로 감소시켰으며, 최대 6.95%의 IPC 향상을 가져왔다.

Diversified Investment of Commercial Real Estate Assets - Focused on Office Building and Retail Real Estate Markets in Seoul - (상업용 부동산 시장의 분산투자에 관한 연구 - 서울지역의 오피스 빌딩 및 소매용 부동산 시장을 중심으로 -)

  • Park, Jongkwon;Jun, Jaebum
    • Korean Journal of Construction Engineering and Management
    • /
    • v.16 no.6
    • /
    • pp.144-155
    • /
    • 2015
  • This paper is to understand investment's efficiency and performance of commercial real estate assets diversified by use and district. To do so, this paper divides two different commercial real estate markets(office build market and retail real estate market) in Seoul city by district into "GBD(Gangnam Business District), YBD(Yeouido Business District), and CBD(Central Business District)" and "GBD(Gangnam Business District), SBD(Shinchon Business District), and CBD(Central Business District)" respectively, configures these districts each other to structure portfolios as its portion varies based on Markowitz's Mean-Variance principle, and looks at risk-return relationship of portfolios to find out efficiency, performance, and optimal investment chosen based upon Sharpe's Performance Index. As a result, the portfolio configured by "10 to 30% of office building asset at CBD" and "70 to 90% of retail real estate asset at CBD" is shown to be the most optimal, suggesting the highest quarterly Sharpe's performance index of 2.7118~2.7776 with quarterly rate of return of 1.826%~1.838% and quarterly standard deviation of 0.573~0.589. Furthermore, it is obvious that diversified portfolio configured by use(office-retail) shows better investment performance than that by district with same type of asset(office-office or retail-retail). Finally, results driven from this research will play an important role to stimulate real estate and construction markets through enlarging ideas as to diversified investment by use and district on real estate indirect investment products.