arrow
返回

Marlin: Mitigating Code Reuse Attacks Using Code Randomization

delete2015-05-01
delete18
PRE
AI
A
Aditi Gupta *
J
Javid Habibi
M
Michael S. Kirkpatrick
E
Elisa Bertino
DOI:10.1109/TDSC.2014.2345384delete
delete原文链接
delete原文求助
delete分享
delete收藏
摘要

摘要

En 中文
Code-reuse attacks, such as return-oriented programming (ROP), are a class of buffer overflow attacks that repurpose existing executable code towards malicious purposes. These attacks bypass defenses against code injection attacks by chaining together sequence of instructions, commonly known as gadgets, to execute the desired attack logic. A common feature of these attacks is the reliance on the knowledge of memory layout of the executable code. We propose a fine grained randomization based approach that breaks these assumptions by modifying the layout of the executable code and hinders code-reuse attack. Our solution, Marlin, randomizes the internal structure of the executable code by randomly shuffling the function blocks in the target binary. This denies the attacker the necessary a priori knowledge of instruction addresses for constructing the desired exploit payload. Our approach can be applied to any ELF binary and every execution of this binary uses a different randomization. We have integrated Marlin into the bash shell that randomizes the target executable before launching it. Our work shows that such an approach incurs low overhead and significantly increases the level of security against code-reuse based attacks.
Keyword:
Return oriented programming
code randomization
security
malware
AI总结

AI总结

对已上传原文的论文进行重点信息的提取,主要内容包括:简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。

期刊

IEEE Transactions on Dependable and Secure Computing 封面图
IEEE Transactions on Dependable and Secure Computing
IF:
7.5
论文数:
2.6K
被引数:
9.6K

机构

Purdue University System 封面图
Purdue University System
学者数:
4.0W
论文数: 3.6W
被引数: 66
P
Purdue University
学者数:
2.7W
论文数: 2.1W
被引数: 147
引用论文

引用论文

Systematic analysis of human antibody response to ebolavirus glycoprotein reveals high prevalence of neutralizing public clonotypes
err
IF0
err2022-01-13
err0
errOAAI
errElaine C. Chen; Pavlo Gilchuk; Seth J. Zost; Philipp A. Ilinykh; Elad Binshtein; Kai Huang; Luke Myers; Stefano Bonissone; Samuel Day; Chandrahaas R. Kona; Andrew Trivette; Joseph X. Reidy; Rachel E. Sutton; Christopher Gainza; Summer Monroig; Edgar Davidson; Erica Ollmann Saphire; Benjamin J. Doranz; Natalie Castellana; Alexander Bukreyev; Robert H. Carnahan; James E. Crowe
err分享
err收藏
err分享
err收藏
Studies on the Plant Methylcrotonyl-CoA Carboxylase1
err1993-04-01
err0
PREAI
errMartin Clauss; Anja Motel; Hartmut K. Lichtenthaler
err分享
err收藏
Acoustic waves in a liquid with a bubble screen
err2003-07-01
err0
PREAI
errV. Sh Shagapov; I. K. Gimaltdinov; N. S. Khabeev; S. S. Bailey
err分享
err收藏
err分享
err收藏
学者 查看更多内容