Earticle

초록

영어

Memory corruption vulnerability is an oldest type of vulnerabilities in software vulnerabilities. Attackers typically use a technique called virtual function table hijacking to exploit memory corruption vulnerability. In this paper, we propose a defense method which extracting virtual function tables and virtual function call related location information from the binary program. Then instrumenting identifier on vtables or backuping the vtables’ pointers to detect vtables’ integrity. Finally, the defense method is verified by Firefox, Chrome, IE browsers. Experiments show that the method can fully and effectively defend the real-world virtual function table hijacking attack with the small performance overhead and good compatibility.

목차

Abstract
 Introduction
 1. An Overview of the VIP
 2. An Overview of the VIP Integrity Protection Strategy
  2.1. ID Instrumentation Solution
  2.2. Id Instrumentation check
  2.3. Backup Instrumentation Solution
  2.4. Backup Instrumentation Check
  2.5. The Analysis of Effectiveness Theory
 3. Experiments and Discussion
 4. Conclusion
 References

키워드

저자

• Wang Zixiang [ Beijing Key Laboratory of Software Security Engineering Technique, School of Software, Beijing Institute of Technology, Beijing, P.R.C ]
• Shan Chun [ Beijing Key Laboratory of Software Security Engineering Technique, School of Software, Beijing Institute of Technology, Beijing, P.R.C ]
• Xue Jingfeng [ Beijing Key Laboratory of Software Security Engineering Technique, School of Software, Beijing Institute of Technology, Beijing, P.R.C ]
• Sun Shiyouhu Changzhen [ Beijing Key Laboratory of Software Security Engineering Technique, School of Software, Beijing Institute of Technology, Beijing, P.R.C ]

참고문헌

발행기관

간행물

표지보기 관심저널 등록

• 간행물명

  International Journal of Security and Its Applications

• 간기

  격월간

• pISSN

  1738-9976

• 수록기간

  2008~2016

• 등재여부

  SCOPUS

• 십진분류

  KDC 505 DDC 605