Work

Object Flow Integrity

Year: 2017

Type: conference-paper

Abstract: Object flow integrity (OFI) augments control-flow integrity (CFI) and software fault isolation (SFI) protections with secure, first-class support for binary object exchange across inter-module trust boundaries. This extends both source-aware and source-free CFI and SFI technologies to a large class of previously unsupported software: those containing immutable system modules with large, object-oriented APIs---which are particularly common in component-based, event-driven consumer software. It also helps to protect these inter-module object exchanges against confused deputy-assisted vtable corruption and counterfeit object-oriented programming attacks.

Source: ACM SIGSAC Conference on Computer and Communications Security (CCS)

DOI: 10.1145/3133956.3133986

Authors: Wenhao Wang, Xiaoyang Xu, Kevin W. Hamlen

Institution: The University of Texas at Dallas

Language: English

Topic: Security and Verification in Computing

Subfield: Hardware and Architecture

Field: Computer Science

Domain: Physical Sciences

Open Access status: bronze

Funders: National Science Foundation, Office of Naval Research, Air Force Office of Scientific Research