.png){kind=icon}
返回
Making Information Hiding Effective Again
.png){kind=icon}
OA
AI
DOI：10.1109/TDSC.2021.3064086.png)
.png){kind=icon}
.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Information hiding (IH) is an important building block for many defenses against code reuse attacks, such as code-pointer integrity (CPI), control-flow integrity (CFI) and fine-grained code (re-)randomization, because of its effectiveness and performance. It employs randomization to probabilistically hide sensitive memory areas, called safe areas, from attackers and ensures their addresses are not leaked by any pointers directly. These defenses used safe areas to protect their critical data, such as jump targets and randomization secrets. However, recent works have shown that IH is vulnerable to various attacks. In this article, we propose a new IH technique called SafeHidden. It continuously re-randomizes the locations of safe areas and thus prevents the attackers from probing and inferring the memory layout to find its location. A new thread-private memory mechanism is proposed to isolate the thread-local safe areas and prevent adversaries from reducing the randomization entropy. It also randomizes the safe areas after the TLB misses to prevent attackers from inferring the address of safe areas using cache side-channels. Existing IH-based defenses can utilize SafeHidden directly without any change. Our experiments show that SafeHidden not only prevents existing attacks effectively but also incurs low performance overhead.
Keyword:
Instruction sets
Registers
Computer crashes
Entropy
Kernel
Security
Probes
Side channel attacks
information hiding
intra-process memory isolation
TLB misses
AI总结
对已上传原文的论文进行重点信息的提取，主要内容包括：简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
IF:
7.5
论文数:
2.5K
被引数:
9.6K
机构
引用论文
Similar Mutagenicity of Photoactivated Porphyrins and Ultraviolet A Radiation in Mouse Embryonic Fibroblasts: Involvement of Oxidative DNA Lesions in Mutagenesis.png)
Biochemistry
BiochemistryIF0
PREAI
分享收藏Latent antibiotics and the potential of the arylomycins for broad-spectrum antibacterial activityMedChemComm
MedChemCommIF0
PREAI
分享收藏Donor site morbidity after scapular tip free flaps in head‐and‐neck reconstructionMicrosurgery
MicrosurgeryIF0
PREAI
分享收藏
查看更多内容