Asia Pacific University Library catalogue


The continuing arms race : code-reuse attacks and defenses [electronic resource] / Per Larsen, Ahmad-Reza Sadeghi.

By: Larsen, Per, 1980-Contributor(s): Sadeghi, Ahmad-RezaMaterial type: TextTextSeries: ACM books ; #18.Publication details: [New York] : Association for Computing Machinery, c2018Description: 1 online resource (xiii, 288 pages) : illustrations (some color) ; 24 cmISBN: 9781970001822 (epub); 9781970001815 (pdf)Subject(s): Computer security | Hacking -- Prevention | Memory management (Computer science) | Computer securityDDC classification: 005.8 LOC classification: QA76.9.A25 | L36 2018ebOnline resources: Available in ACM Digital Library. Requires Log In to view full text.
Contents:
How Memory Safety Violations Enable Exploitation of Programs -- Protecting Dynamic Code -- Diversity and Information Leaks -- Code-Pointer Integrity -- Evaluating Control: Flow Restricting Devices -- Attacking Dynamic Code -- Hardware Control Flow Integrity -- Multi-Variant Execution Environments.
Summary: As human activities moved to the digital domain, so did all the well-known malicious behaviors including fraud, theft, and other trickery. There is no silver bullet, and each security threat calls for a specific answer. One specific threat is that applications accept malformed inputs, and in many cases it is possible to craft inputs that let an intruder take full control over the target computer system. The nature of systems programming languages lies at the heart of the problem. Rather than rewriting decades of well-tested functionality, this book examines ways to live with the (programming) sins of the past while shoring up security in the most efficient manner possible. We explore a range of different options, each making significant progress towards securing legacy programs from malicious inputs. The solutions explored include enforcement-type defenses, which excludes certain program executions because they never arise during normal operation. Another strand explores the idea of presenting adversaries with a moving target that unpredictably changes its attack surface thanks to randomization. We also cover tandem execution ideas where the compromise of one executing clone causes it to diverge from another thus revealing adversarial activities. The main purpose of this book is to provide readers with some of the most influential works on run-time exploits and defenses. We hope that the material in this book will inspire readers and generate new ideas and paradigms. --
    Average rating: 0.0 (0 votes)
Item type Current library Collection Call number Status Date due Barcode
General Circulation General Circulation APU Library
Online Database
E-Book QA76.9.A25 L36 2018eb (Browse shelf (Opens below)) Available

Includes bibliographical references (pages 261-281).

How Memory Safety Violations Enable Exploitation of Programs -- Protecting Dynamic Code -- Diversity and Information Leaks -- Code-Pointer Integrity -- Evaluating Control: Flow Restricting Devices -- Attacking Dynamic Code -- Hardware Control Flow Integrity -- Multi-Variant Execution Environments.

As human activities moved to the digital domain, so did all the well-known malicious behaviors including fraud, theft, and other trickery. There is no silver bullet, and each security threat calls for a specific answer. One specific threat is that applications accept malformed inputs, and in many cases it is possible to craft inputs that let an intruder take full control over the target computer system. The nature of systems programming languages lies at the heart of the problem. Rather than rewriting decades of well-tested functionality, this book examines ways to live with the (programming) sins of the past while shoring up security in the most efficient manner possible. We explore a range of different options, each making significant progress towards securing legacy programs from malicious inputs. The solutions explored include enforcement-type defenses, which excludes certain program executions because they never arise during normal operation. Another strand explores the idea of presenting adversaries with a moving target that unpredictably changes its attack surface thanks to randomization. We also cover tandem execution ideas where the compromise of one executing clone causes it to diverge from another thus revealing adversarial activities. The main purpose of this book is to provide readers with some of the most influential works on run-time exploits and defenses. We hope that the material in this book will inspire readers and generate new ideas and paradigms. --

There are no comments on this title.

to post a comment.