Return
Marlin: Mitigating Code Reuse Attacks Using Code Randomization
DOI:10.1109/TDSC.2014.2345384.png)
Abstract
En 中文
Code-reuse attacks, such as return-oriented programming (ROP), are a class of buffer overflow attacks that repurpose existing executable code towards malicious purposes. These attacks bypass defenses against code injection attacks by chaining together sequence of instructions, commonly known as gadgets, to execute the desired attack logic. A common feature of these attacks is the reliance on the knowledge of memory layout of the executable code. We propose a fine grained randomization based approach that breaks these assumptions by modifying the layout of the executable code and hinders code-reuse attack. Our solution, Marlin, randomizes the internal structure of the executable code by randomly shuffling the function blocks in the target binary. This denies the attacker the necessary a priori knowledge of instruction addresses for constructing the desired exploit payload. Our approach can be applied to any ELF binary and every execution of this binary uses a different randomization. We have integrated Marlin into the bash shell that randomizes the target executable before launching it. Our work shows that such an approach incurs low overhead and significantly increases the level of security against code-reuse based attacks.
Keywords:
Return oriented programming
code randomization
security
malware
AI Summary
Key information extracted from the uploaded paper, including a brief overview, abstract, background, key highlights, visual analysis, and future outlook.
Journal
IF:
7.5
Papers:
2.6K
Citations:
9.6K
Organization
Cited Papers
Effect of pendant arm position and length on the structure and properties of nickel aromatic dicarboxylate coordination polymers incorporating a kinked organodiimine
Polyhedron
IF0
Plant Polyketide Synthases Leading to Stilbenoids Have a Domain Catalyzing Malonyl-CoA:CO2 Exchange, Malonyl-CoA Decarboxylation, and Covalent Enzyme Modification and a Site for Chain Lengthening
Biochemistry
IF0

