Novel Techniques in Recovering, Embedding, and Enforcing Policies for Control-Flow Integrity / Information Security and Cryptography (PDF)
(Sprache: Englisch)
Control-Flow Integrity (CFI) is an attractive security property with which most injected and code-reuse attacks can be defeated, including advanced attacking techniques like return-oriented programming.
CFI extracts a control-flow graph (CFG) for a given...
CFI extracts a control-flow graph (CFG) for a given...
sofort als Download lieferbar
Printausgabe 106.99 €
eBook (pdf) -10%
96.29 €
48 DeutschlandCard Punkte
sammeln
- Lastschrift, Kreditkarte, Paypal, Rechnung
- Kostenloser tolino webreader
Produktdetails
Produktinformationen zu „Novel Techniques in Recovering, Embedding, and Enforcing Policies for Control-Flow Integrity / Information Security and Cryptography (PDF)“
Control-Flow Integrity (CFI) is an attractive security property with which most injected and code-reuse attacks can be defeated, including advanced attacking techniques like return-oriented programming.
CFI extracts a control-flow graph (CFG) for a given program, with checks inserted before indirect branch instructions. Before executed during runtime, the checks consult the CFG to ensure that the indirect branch is allowed to reach the intended target. Hence, any sort of control-flow hijacking can be prevented. This concise volume proposes novel solutions to handle the fundamental components of CFI enforcement: accurately recovering the policy (CFG); embedding the CFI policy securely; and efficiently enforcing the CFI policy.
Addressing the first component, the book systematically studies two methods that recover CFI policy based on function signature matching at the binary level, then offers a unique rule-and heuristic-based mechanism to more accurately recover function signature. To embed CFI policy securely, the book advocates a new platform that encodes the policy into the machine instructions directly without relying on consulting any read-only data structure. Finally, the work prescribes a mature dynamic-code-optimization platform called DynamoRIO to enforce the policy when needed.
Key features:
- Provides deep understanding of Control-Flow Integrity
- Offers new insights on the relationship between function signature and compiler optimization
- Demonstrates how CFI can be more efficient than Data Execution Prevention
This focused, distinctive volume will appeal to researchers, scientists, lecturers, as well as postgraduates with a background in binary analysis. Libraries, practitioners, and professionals will also benefit, depending on their missions and programs.
¿Yan Lin is at the School of Computing and Information Systems, Singapore Management University. Her extensive foundational studies have focused on the area of cybersecurity, and her current research focuses on software security and system security.
Autoren-Porträt von Yan Lin
Yan Lin is at the School of Computing and Information Systems, Singapore Management University. Her extensive studies have focused on the area of cybersecurity, and her current researches focus on software security and system security.
Bibliographische Angaben
- Autor: Yan Lin
- 2021, 1st ed. 2021, 95 Seiten, Englisch
- Verlag: Springer International Publishing
- ISBN-10: 3030731413
- ISBN-13: 9783030731410
- Erscheinungsdatum: 30.04.2021
Abhängig von Bildschirmgröße und eingestellter Schriftgröße kann die Seitenzahl auf Ihrem Lesegerät variieren.
eBook Informationen
- Dateiformat: PDF
- Größe: 3.88 MB
- Ohne Kopierschutz
- Vorlesefunktion
Sprache:
Englisch
Kommentar zu "Novel Techniques in Recovering, Embedding, and Enforcing Policies for Control-Flow Integrity / Information Security and Cryptography"
0 Gebrauchte Artikel zu „Novel Techniques in Recovering, Embedding, and Enforcing Policies for Control-Flow Integrity / Information Security and Cryptography“
| Zustand | Preis | Porto | Zahlung | Verkäufer | Rating |
|---|
Schreiben Sie einen Kommentar zu "Novel Techniques in Recovering, Embedding, and Enforcing Policies for Control-Flow Integrity / Information Security and Cryptography".
Kommentar verfassen