.png){kind=icon}
返回
Profile-guided code identification and hardening using return oriented programming
.png){kind=icon}
PRE
AI
DOI：10.1016/j.jisa.2019.102364.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Protecting code from a security breach needs a systematic defense. The most promising solution in this task is to protect the control flow of the code. A majority of the existing approaches for protecting the code using control flow information suffer from high performance overhead. In this paper, we propose a method for assisted discovery of profile-guided techniques for the cold-code identification and low-overhead software security hardening. Our method proceeds with identifying cold-code and hot-code by performing static and dynamic analysis on the input code. Furthermore, develops heuristics to identify security-sensitive code. The outcome of this research is the identification of a minimum number of security sensitive points with minimal overhead. This research develops a common framework for profile-guided code self-verification based on predetermined security and performance requirements. We use Return Oriented Programming (ROP) which is used mostly by adversaries for the defensive purpose to build self-verifying ROP chain. The ROP chain inserted into the code diversifies and obfuscates execution of the program hence, making it harder to breach. (C) 2019 Elsevier Ltd. All rights reserved.
Keyword:
Cold code
Hot code
Security sensitive code
Return oriented programming (ROP)
AI总结
对已上传原文的论文进行重点信息的提取，主要内容包括：简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
IF:
3.7
论文数:
2.0K
被引数:
4.9K
机构
.png){kind=icon}
没有更多内容