Backward-edge Control-flow Protection on Embedded System Benchmarks
0.1Overhead (%)µRAI
Evaluation results
| Method | Links | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| µRAIBackward Enforcement Policy=return address integrity, Required Hardware=MPU, Prototype Arch.=M, Prototype System=Bare-metal, Support Arch.=Universal2026.05 | 0.1 | — | — | — | — | — | — | — | |
| DeTRAPBackward Enforcement Policy=shadow stack, Required Hardware=Debug Trigger RISC-V, Prototype Arch.=Bare-metal, Prototype System=Bare-metal, Support Arch.=Universal2026.05 | 1.9 | — | — | — | — | — | — | — | |
| SUMBackward Enforcement Policy=shadow stack, Required Hardware=MPU, Prototype Arch.=M, Prototype System=Both, Support Arch.=Universal2026.05 | 2.77 | — | — | — | — | — | — | — | |
| SilhouetteBackward Enforcement Policy=shadow stack, Required Hardware=ULSI/MPU, Prototype Arch.=M, Prototype System=Bare-metal, Support Arch.=Universal2026.05 | 3.4 | — | — | — | — | — | — | — | |
| KageBackward Enforcement Policy=shadow stack, Required Hardware=ULSI/MPU, Prototype Arch.=M, Prototype System=RTOS, Support Arch.=Universal2026.05 | 5.2 | — | — | — | — | — | — | — | |
| WATSONBackward Enforcement Policy=shadow stack, Required Hardware=DWT, Prototype Arch.=M, Prototype System=Bare-metal, Support Arch.=Universal2026.05 | 7.33 | — | — | — | — | — | — | — | |
| RIOBackward Enforcement Policy=encrypt return addresses, Required Hardware=TrustZone, Prototype Arch.=M, Prototype System=Bare-metal, Support Arch.=Selected2026.05 | 16.83 | — | — | — | — | — | — | — | |
| RECFISHBackward Enforcement Policy=shadow stack, Required Hardware=MPU, Prototype Arch.=R, Prototype System=RTOS, Support Arch.=Universal2026.05 | 21 | — | — | — | — | — | — | — | |
| TzmCFIBackward Enforcement Policy=shadow stack, Required Hardware=TrustZone, Prototype Arch.=M, Prototype System=RTOS, Support Arch.=Selected2026.05 | 84 | — | — | — | — | — | — | — | |
| SherlocBackward Enforcement Policy=shadow stack, Required Hardware=TrustZone/MTB, Prototype Arch.=M, Prototype System=Both, Support Arch.=Restricted2026.05 | 100 | — | — | — | — | — | — | — | |
| CaREBackward Enforcement Policy=shadow stack, Required Hardware=TrustZone, Prototype Arch.=M, Prototype System=Bare-metal, Support Arch.=Selected2026.05 | 513 | — | — | — | — | — | — | — |