| Autor: |
HUANG Huafeng, SU Purui, YANG Yi, JIA Xiangkun |
| Zdroj: |
Journal on Communication / Tongxin Xuebao; 1/15/2022, Vol. 43 Issue 1, p83-95, 13p |
| Abstrakt: |
To solve the problem that the current vulnerability automatic exploitation generation methods cannot automatically generate control-flow-hijacking exploitation from write-what-where, a method of automatic exploitation generation for write-what-where was proposed. First, the write-what-where vulnerability was detected based on the memory address control strength dynamic taint analysis method. Then, the vulnerability exploitation elements were searched based on the vulnerability exploitation modes, and the exploitation of write-what-where vulnerability was generated automatically by constraint solving. The experimental results show that the proposed method can effectively detect write-what-where vulnerability, search exploitation elements, and automatically generate the control-flow-hijacking exploitation from write-what-where. [ABSTRACT FROM AUTHOR] |
| Databáze: |
Complementary Index |
| Externí odkaz: |
|
