Enviral: Fuzzing the Environment for Evasive Malware Analysis

Autor: Floris Gorter, Cristiano Giuffrida, Erik Van Der Kouwe

Publikováno v: EUROSEC 2023: Proceedings of the 2023 European Workshop on System Security, 8-14
STARTPAGE=8;ENDPAGE=14;TITLE=EUROSEC 2023
Gorter, F, Giuffrida, C & van der Kouwe, E 2023, Enviral: Fuzzing the Environment for Evasive Malware Analysis . in EUROSEC 2023 : Proceedings of the 2023 European Workshop on System Security . Association for Computing Machinery, Inc, pp. 8-14, 16th European Workshop on Systems Security, EUROSEC 2023, Rome, Italy, 8/05/23 . https://doi.org/10.1145/3578357.3589455

Analyzing malicious behavior is vital to effectively safeguard computer systems against malware. However, contemporary malware frequently contains evasive behavior, which allows it to hide its malicious intent from analysis. More specifically, if the

Externí odkaz: https://explore.openaire.eu/search/publication?articleId=doi_dedup___::3c1939bcfb78dfcb2915d814f138e27a
https://doi.org/10.1145/3578357.3589455

Mitigating Information Leakage Vulnerabilities with Type-based Data Isolation

Autor: Alyssa Milburn, Erik Van Der Kouwe, Cristiano Giuffrida

Publikováno v: Milburn, A, Van Der Kouwe, E & Giuffrida, C 2022, Mitigating Information Leakage Vulnerabilities with Type-based Data Isolation . in 2022 IEEE Symposium on Security and Privacy (SP) : [Proceedings] . Proceedings-IEEE Symposium on Security and Privacy, no. May, vol. 2022, Institute of Electrical and Electronics Engineers Inc., pp. 1049-1065, 43rd IEEE Symposium on Security and Privacy, SP 2022, San Francisco, United States, 23/05/22 . https://doi.org/10.1109/SP46214.2022.9833675
2022 IEEE Symposium on Security and Privacy (SP): [Proceedings], 1049-1065
STARTPAGE=1049;ENDPAGE=1065;TITLE=2022 IEEE Symposium on Security and Privacy (SP)

Information leakage vulnerabilities (or simply info leaks) such as out-of-bounds/uninitialized reads in the architectural or speculative domain pose a significant security threat, allowing attackers to leak sensitive data such as crypto keys. At the

Externí odkaz: https://explore.openaire.eu/search/publication?articleId=doi_dedup___::b17788edfd00fc2bc61ad2c8e72979dc
https://hdl.handle.net/1871.1/05fa6149-2233-41e1-bab6-b6170a8d61a9

PIBE

Autor: Victor Duta, Herbert Bos, Cristiano Giuffrida, Erik van der Kouwe

Publikováno v: ASPLOS
ASPLOS 2021: Proceedings of the 26th ACM International Conference on Architectural Support for Programming Languages and Operating Systems, 743-757
STARTPAGE=743;ENDPAGE=757;TITLE=ASPLOS 2021
Proceedings of the 26th ACM International Conference on Architectural Support for Programming Languages and Operating Systems
Duta, V, Giuffrida, C, Bos, H & Van Der Kouwe, E 2021, PIBE : Practical kernel control-flow hardening with profile-guided indirect branch elimination . in ASPLOS 2021 : Proceedings of the 26th ACM International Conference on Architectural Support for Programming Languages and Operating Systems . International Conference on Architectural Support for Programming Languages and Operating Systems-ASPLOS, Association for Computing Machinery, pp. 743-757, 26th ACM International Conference on Architectural Support for Programming Languages and Operating Systems, ASPLOS 2021, Virtual, Online, United States, 19/04/21 . https://doi.org/10.1145/3445814.3446740

Control-flow hijacking, which allows an attacker to execute arbitrary code, remains a dangerous software vulnerability. Control-flow hijacking in speculated or transient execution is particularly insidious as it allows attackers to leak data from ope

Externí odkaz: https://explore.openaire.eu/search/publication?articleId=doi_dedup___::f09503908f90adfba0299b2e215eefaa
https://research.vu.nl/en/publications/2b26e535-a2a6-4627-882b-a333bb2c0e49

IScanU: A Portable Scanner for Undocumented Instructions on RISC Processors

Autor: Kristian F. D. Rietveld, Michael Goebel, Erik van der Kouwe, Rens Dofferhoff

Publikováno v: Dofferhoff, R, Göebel, M, Rietveld, K & Van Der Kouwe, E 2020, IScanU: A Portable Scanner for Undocumented Instructions on RISC Processors . in 2020 50th Annual IEEE/IFIP International Conference on Dependable Systems and Networks (DSN) : [Proceedings] . Institute of Electrical and Electronics Engineers Inc., pp. 306-317, 50th Annual IEEE/IFIP International Conference on Dependable Systems and Networks, DSN 2020, Valencia, Spain, 29/06/20 . https://doi.org/10.1109/DSN48063.2020.00047
2020 50th Annual IEEE/IFIP International Conference on Dependable Systems and Networks (DSN): [Proceedings], 306-317
STARTPAGE=306;ENDPAGE=317;TITLE=2020 50th Annual IEEE/IFIP International Conference on Dependable Systems and Networks (DSN)
DSN
Proceedings 50th annual IEEE/IFIP international conference on dependable systems and networks, 306-317. IEEE
STARTPAGE=306;ENDPAGE=317;TITLE=Proceedings 50th annual IEEE/IFIP international conference on dependable systems and networks

Undocumented and faulty CPU instructions can cause undefined behavior and system instability, impairing software efforts such as OS crash recovery and resilience, and system security. Although often not considered, the identification of such undocume

Externí odkaz: https://explore.openaire.eu/search/publication?articleId=doi_dedup___::126a1b40731ec5509a8cf0405b69c5ec
https://hdl.handle.net/1871.1/fd1885aa-28a2-48ea-994c-339cb0f3b70a

Meizodon

Autor: Sebastiaan Alvarez Rodriguez, Erik van der Kouwe

Publikováno v: CECC

Many Android applications are uploaded to app stores every day. A relatively small fraction of these applications, or apps, is malware. Several research teams developed tools which automate malware detection for apps, to keep up with the never-ending

Externí odkaz: https://explore.openaire.eu/search/publication?articleId=doi_________::2fd3697e1b6384b9cb9362003ee5125d
https://doi.org/10.1145/3360664.3360672