Profile-guided code identification and hardening using return oriented programming

doi:10.1016/j.jisa.2019.102364

Return

Profile-guided code identification and hardening using return oriented programming

2019-10-01

PRE

Rajesh Shrivastava *

Chittaranjan Hota

DOI：10.1016/j.jisa.2019.102364

Original

Original request for help

Save

Abstract

En 中文

Protecting code from a security breach needs a systematic defense. The most promising solution in this task is to protect the control flow of the code. A majority of the existing approaches for protecting the code using control flow information suffer from high performance overhead. In this paper, we propose a method for assisted discovery of profile-guided techniques for the cold-code identification and low-overhead software security hardening. Our method proceeds with identifying cold-code and hot-code by performing static and dynamic analysis on the input code. Furthermore, develops heuristics to identify security-sensitive code. The outcome of this research is the identification of a minimum number of security sensitive points with minimal overhead. This research develops a common framework for profile-guided code self-verification based on predetermined security and performance requirements. We use Return Oriented Programming (ROP) which is used mostly by adversaries for the defensive purpose to build self-verifying ROP chain. The ROP chain inserted into the code diversifies and obfuscates execution of the program hence, making it harder to breach. (C) 2019 Elsevier Ltd. All rights reserved.

Keywords:

Cold code

Hot code

Security sensitive code

Return oriented programming (ROP)

AI Summary

Key information extracted from the uploaded paper, including a brief overview, abstract, background, key highlights, visual analysis, and future outlook.