arrow
Return

Marlin: Mitigating Code Reuse Attacks Using Code Randomization

delete2015-05-01
delete18
PRE
AI
A
Aditi Gupta *
J
Javid Habibi
M
Michael S. Kirkpatrick
E
Elisa Bertino
DOI:10.1109/TDSC.2014.2345384delete
deleteOriginal
deleteOriginal request for help
deleteShare
deleteSave
Abstract

Abstract

En 中文
Code-reuse attacks, such as return-oriented programming (ROP), are a class of buffer overflow attacks that repurpose existing executable code towards malicious purposes. These attacks bypass defenses against code injection attacks by chaining together sequence of instructions, commonly known as gadgets, to execute the desired attack logic. A common feature of these attacks is the reliance on the knowledge of memory layout of the executable code. We propose a fine grained randomization based approach that breaks these assumptions by modifying the layout of the executable code and hinders code-reuse attack. Our solution, Marlin, randomizes the internal structure of the executable code by randomly shuffling the function blocks in the target binary. This denies the attacker the necessary a priori knowledge of instruction addresses for constructing the desired exploit payload. Our approach can be applied to any ELF binary and every execution of this binary uses a different randomization. We have integrated Marlin into the bash shell that randomizes the target executable before launching it. Our work shows that such an approach incurs low overhead and significantly increases the level of security against code-reuse based attacks.
Keywords:
Return oriented programming
code randomization
security
malware
AI Summary

AI Summary

Key information extracted from the uploaded paper, including a brief overview, abstract, background, key highlights, visual analysis, and future outlook.

Journal

IEEE Transactions on Dependable and Secure Computing cover
IEEE Transactions on Dependable and Secure Computing
IF:
7.5
Papers:
2.6K
Citations:
9.6K

Organization

Purdue University System cover
Purdue University System
Scholars:
4.0W
Papers: 3.6W
Citations: 66
P
Purdue University
Scholars:
2.7W
Papers: 2.1W
Citations: 147
Cited Papers

Cited Papers

Systematic analysis of human antibody response to ebolavirus glycoprotein reveals high prevalence of neutralizing public clonotypes
err
IF0
err2022-01-13
err0
errOAAI
errElaine C. Chen; Pavlo Gilchuk; Seth J. Zost; Philipp A. Ilinykh; Elad Binshtein; Kai Huang; Luke Myers; Stefano Bonissone; Samuel Day; Chandrahaas R. Kona; Andrew Trivette; Joseph X. Reidy; Rachel E. Sutton; Christopher Gainza; Summer Monroig; Edgar Davidson; Erica Ollmann Saphire; Benjamin J. Doranz; Natalie Castellana; Alexander Bukreyev; Robert H. Carnahan; James E. Crowe
errShare
errSave
Studies on the Plant Methylcrotonyl-CoA Carboxylase1
err1993-04-01
err0
PREAI
errMartin Clauss; Anja Motel; Hartmut K. Lichtenthaler
errShare
errSave
Acoustic waves in a liquid with a bubble screen
err2003-07-01
err0
PREAI
errV. Sh Shagapov; I. K. Gimaltdinov; N. S. Khabeev; S. S. Bailey
errShare
errSave
errShare
errSave
researcher View more