標題: | Mitigating Over-Permissible Transfer for Control Flow Integrity |
作者: | Chen, Chung-Kuan Chen, Shang-Kuei Shieh, Shiuhpyng Winston 資訊工程學系 Department of Computer Science |
關鍵字: | vulnerability;control flow integrity;control-flow hijack;symbolic execution |
公開日期: | 1-一月-2018 |
摘要: | Control flow integrity (CFI) is a promising defense mechanism for controlling hijacking attacks. In most situations, CFI prevents the control flow transfer from hijacking by the adversary. However, the over-permissible transfer problem remains a major issue in most CFI systems. By taking advantage of this problem, an adversary can still hijack control flows to the code not designed by the original programmer but intended for execution by the adversary. To eliminate over-permissible transfer, we propose transfer target analysis for the CFI system. With value set analysis and concolic execution, the transfer target analysis is able to construct the precise control flow graph. Given the fine-grained policy, over-permissible transfer can be prohibited. To save memory, the Bloom filter-based policy database is established to store a large number of policies in a compact data structure with low false positive rate. The evaluation uses benign programs from the SPEC CPU2006 benchmarks and the malign programs from the RIPE benchmark. The result shows that all the benign programs can execute normally but all the malign programs are blocked. |
URI: | http://hdl.handle.net/11536/151755 |
ISBN: | 978-1-5386-5790-4 |
期刊: | 2018 IEEE CONFERENCE ON DEPENDABLE AND SECURE COMPUTING (DSC) |
起始頁: | 148 |
結束頁: | 155 |
顯示於類別: | 會議論文 |