.png){kind=icon}
Return
Layered Object-Oriented Programming: Advanced VTable Reuse Attacks on Binary-Level Defense
.png){kind=icon}
PRE
AI
DOI：10.1109/TIFS.2018.2855648.png)
.png){kind=icon}
Original request for help.png){kind=icon}
Share.png){kind=icon}
Save
Abstract
En 中文
Vtable reuse attack, as a novel type of code reuse attacks, is introduced to bypass most binary-level control flow integrity enforcement and vtable integrity enforcement. So far, two binary-level defenses (TypeArmor and vfGuard) are proposed to defend against vtable reuse attacks. Both techniques use semantic information as the control flow integrity enforcement policy, i.e., TypeArmor and vfGuard utilize argument register count and dispatch offset at virtual callsite as the signature to check the validity of target functions, respectively. In this paper, we propose layered object-oriented programming (LOOP), an advanced vtable reuse attack, to show that the coarse-grained control flow integrity strategies are still vulnerable to vtable reuse attacks. In LOOP, we introduce argument expansion gadgets and transfer gadgets to, respectively, bypass TypeArmor and vfGuard. We generalize the characteristics of both gadgets and develop a tool to discover them at the binary level. We demonstrated that under the protection of TypeArmor and vfGuard, Firefox, Adobe Flash Player, and Internet Explorer are all vulnerable to LOOP attacks. Furthermore, we show the availability of argument expansion gadgets and transfer gadgets in common software or libraries.
Keywords:
Vtable reuse attacks
control flow integrity
AI Summary
Key information extracted from the uploaded paper, including a brief overview, abstract, background, key highlights, visual analysis, and future outlook.
Journal
IF:
8
Papers:
5.2K
Citations:
2.3W
Organization
Cited Papers
ShareSaveInterspecific Hybridization as a Potential Method for Improvement of Agrostis Species.png)
Crop Science
Crop ScienceIF0
PREAI
ShareSaveShareSaveNovel κ light-chain gene rearrangements in mouse λ light chain-producing B lymphocytesNature
NatureIF0
PREAI
ShareSaveShareSave
ShareSave
View more