返回
Marlin: Mitigating Code Reuse Attacks Using Code Randomization
DOI:10.1109/TDSC.2014.2345384.png)
摘要
En 中文
Code-reuse attacks, such as return-oriented programming (ROP), are a class of buffer overflow attacks that repurpose existing executable code towards malicious purposes. These attacks bypass defenses against code injection attacks by chaining together sequence of instructions, commonly known as gadgets, to execute the desired attack logic. A common feature of these attacks is the reliance on the knowledge of memory layout of the executable code. We propose a fine grained randomization based approach that breaks these assumptions by modifying the layout of the executable code and hinders code-reuse attack. Our solution, Marlin, randomizes the internal structure of the executable code by randomly shuffling the function blocks in the target binary. This denies the attacker the necessary a priori knowledge of instruction addresses for constructing the desired exploit payload. Our approach can be applied to any ELF binary and every execution of this binary uses a different randomization. We have integrated Marlin into the bash shell that randomizes the target executable before launching it. Our work shows that such an approach incurs low overhead and significantly increases the level of security against code-reuse based attacks.
Keyword:
Return oriented programming
code randomization
security
malware
AI总结
对已上传原文的论文进行重点信息的提取,主要内容包括:简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
IF:
7.5
论文数:
2.6K
被引数:
9.6K
机构
引用论文
Effect of pendant arm position and length on the structure and properties of nickel aromatic dicarboxylate coordination polymers incorporating a kinked organodiimine
Polyhedron
IF0
Plant Polyketide Synthases Leading to Stilbenoids Have a Domain Catalyzing Malonyl-CoA:CO2 Exchange, Malonyl-CoA Decarboxylation, and Covalent Enzyme Modification and a Site for Chain Lengthening
Biochemistry
IF0

