Type-After-Type

Autor: Taddeus Kroes, Cristiano Giuffrida, Erik van der Kouwe, Chris Ouwehand, Herbert Bos

Publikováno v: ACSAC
ACSAC '18 Proceedings of the 34th Annual Computer Security Applications Conference, 17-27
STARTPAGE=17;ENDPAGE=27;TITLE=ACSAC '18 Proceedings of the 34th Annual Computer Security Applications Conference
Proceedings of the 34th Annual Computer Security Applications Conference on-ACSAC 18
Proceedings of the 34th Annual Computer Security Applications Conference on -ACSAC '18
Van Der Kouwe, E, Kroes, T, Ouwehand, C, Bos, H & Giuffrida, C 2018, Type-after-type : Practical and complete type-safe memory reuse . in ACSAC '18 Proceedings of the 34th Annual Computer Security Applications Conference . Association for Computing Machinery, San Juan, PR, pp. 17-27, 34th Annual Computer Security Applications Conference, ACSAC 2018, San Juan, United States, 3/12/18 . https://doi.org/10.1145/3274694.3274705

Temporal memory errors, such as use-after-free bugs, are increasingly popular among attackers and their exploitation is hard to stop efficiently using current techniques. We present a new design, called Type-After-Type, which builds on abstractions i

Externí odkaz: https://explore.openaire.eu/search/publication?articleId=doi_dedup___::5b6646cae588d65cff2c209e070cd1ce
https://doi.org/10.1145/3274694.3274705

BinRec

Autor: Cristiano Giuffrida, Stijn Volckaert, Michael Franz, Yeoul Na, Herbert Bos, Anil Altinay, Joseph Nash, Taddeus Kroes

Publikováno v: Kroes, T, Altinay, A, Nash, J, Na, Y, Volckaert, S, Bos, H, Franz, M & Giuffrida, C 2018, BinRec : Atack surface reduction through dynamic binary recovery . in FEAST 2018-Proceedings of the 2018 Workshop on Forming an Ecosystem Around Software Transformation, co-located with CCS 2018 . Association for Computing Machinery, pp. 8-13, 2018 Workshop on Forming an Ecosystem Around Software Transformation, FEAST, held in conjunction with the 25th ACM Conference on Computer and Communications Security, CCS 2018, Toronto, Canada, 19/10/18 . https://doi.org/10.1145/3273045.3273050
FEAST 2018-Proceedings of the 2018 Workshop on Forming an Ecosystem Around Software Transformation, co-located with CCS 2018, 8-13
STARTPAGE=8;ENDPAGE=13;TITLE=FEAST 2018-Proceedings of the 2018 Workshop on Forming an Ecosystem Around Software Transformation, co-located with CCS 2018

Compile-time specialization and feature pruning through static binary rewriting have been proposed repeatedly as techniques for reducing the attack surface of large programs, and for minimizing the trusted computing base. We propose a new approach to

Externí odkaz: https://explore.openaire.eu/search/publication?articleId=doi_dedup___::54fb398648047674a5c77d64c2720a7a
https://doi.org/10.1145/3273045.3273050

JTR

Autor: Lucian Cojocar, Taddeus Kroes, Herbert Bos

Publikováno v: Cojocar, L, Kroes, T & Bos, H 2017, JTR : A binary solution for switch-case recovery . in Engineering Secure Software and Systems-9th International Symposium, ESSoS 2017, Proceedings . vol. 10379 LNCS, Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), vol. 10379 LNCS, Springer/Verlag, pp. 177-195, 9th International Symposium on Engineering Secure Software and Systems, ESSoS 2017, Bonn, Germany, 3/07/17 . https://doi.org/10.1007/978-3-319-62105-0_12
Engineering Secure Software and Systems-9th International Symposium, ESSoS 2017, Proceedings, 10379 LNCS, 177-195
Lecture Notes in Computer Science ISBN: 9783319621043
ESSoS

Most security solutions that rely on binary rewriting assume a clean separation between code and data. Unfortunately, jump tables violate this assumption. In particular, switch statements in binary code often appear as indirect jumps with jump tables

Externí odkaz: https://explore.openaire.eu/search/publication?articleId=doi_dedup___::6570682fb18d6e097b0c91823fa5def6
https://research.vu.nl/en/publications/c722bf74-ba40-46b6-a8e7-5f16f49fd3ed