Novel Techniques in Recovering, Embedding, and Enforcing Policies for Control-Flow IntegrityКНИГИ » ПРОГРАММИНГ
Название: Novel Techniques in Recovering, Embedding, and Enforcing Policies for Control-Flow Integrity Автор: Yan Lin Издательство: Springer Серия: Information Security and Cryptography Год: 2021 Страниц: 106 Язык: английский Формат: pdf (true), epub Размер: 10.1 MB
There are three fundamental components in Control-Flow Integrity (CFI) enforcement. The first component is accurately recovering the policy (CFG). Usually, the more precise the policy is, the more security CFI improves, but precise CFG generation was considered hard without the support of source code. The second component is embedding the CFI policy securely. Current CFI enforcement usually inserts checks before indirect branches to consult a read-only table which stores the valid CFG information. However, this kind of read-only table can be overwritten by some kinds of attacks (e.g., the Rowhammer attack and data-oriented programming). The third component is to efficiently enforce the CFI policy. In current approaches CFI checks are always executed whenever there is an indirect control flow transfer. Therefore, it is critical to minimize the performance impact of CFI checks.
In this book, we propose novel solutions to handle these three fundamental components. To generate a precise CFI policy without the support of the source code, we systematically study two methods which recover CFI policy based on function signature matching at the binary level and propose our novel rule- and heuristic-based mechanism to more accurately recover function signature. To embed CFI policy securely, we design a novel platform which encodes the policy into the machine instructions directly without relying on consulting any read-only data structure, by making use of the idea of instruction-set randomization. Each basic block is encrypted with a key derived from the CFG. To efficiently enforce CFI policy, we make use of a mature dynamic code optimization platform called DynamoRIO to enforce the policy so that we are only required to do the CFI check when needed.
Contents: 1. Introduction 2. Literature Review 3. When Function Signature Recovery Meets Compiler Optimization 4. Control-Flow Carrying Code 5. Control-Flow Integrity Enforcement with Dynamic Code Optimization 6. Conclusions
Скачать Novel Techniques in Recovering, Embedding, and Enforcing Policies for Control-Flow Integrity
Computer Security: Art and Science 2nd Edition Название: Computer Security: Art and Science Second Edition Автор: Matt Bishop Издательство: Addison-Wesley Professional Год: 2018 Формат: True PDF,...
Electronic Warfare Название: Electronic Warfare Автор: Adam T. Elsworth Издательство: Nova Science Publishers, Inc. Год: 2011 ISBN: 9781613245415 Серия: Defense,...
Enterprise Web Services Security Название: Enterprise Web Services Security Автор: Rickland Hollar and Richard Murphy Издательство: Charles River Media Год: 2005 Формат: PDF, EPUB,...
Информация
Посетители, находящиеся в группе Гости, не могут оставлять комментарии к данной публикации.
Навигация
Вход на сайт
Реклама
Novel Techniques in Recovering, Embedding, and Enforcing Policies for Control-Flow Integrity 
Название: Novel Techniques in Recovering, Embedding, and Enforcing Policies for Control-Flow Integrity
