Work

CoDaRR: Continuous Data Space Randomization against Data-Only Attacks

Year: 2020

Type: conference-paper

Abstract: The widespread deployment of exploit mitigations such as CFI and shadow stacks are making code-reuse attacks increasingly difficult. This has forced adversaries to consider data-only attacks against which the venerable ASLR remains the primary deployed defense.Data-Space Randomization (DSR) techniques raise the bar against data-only attacks by making it harder for adversaries to inject malicious data flows into vulnerable applications. DSR works by masking memory load and store instructions. Masks are chosen (i) to not interfere with intended data flows and (ii) such that masking likely interferes with unintended flows introduced by malicious program inputs.

Source: ACM Asia Conference on Computer and Communications Security (ASIA CCS)

DOI: 10.1145/3320269.3384757

Authors: Prabhu Rajasekaran, Stephen Crane, David Gens, Yeoul Na, Stijn Volckaert, Michael Franz

Institutions: University of California, Irvine, IMEC, KU Leuven

Language: English

Topic: Security and Verification in Computing

Subfield: Hardware and Architecture

Field: Computer Science

Domain: Physical Sciences

Open Access status: bronze