NDLI: Strict Virtual Call Integrity Checking for C++ Binaries

Please wait, while we are loading the content...

Hardware Trojans and Other Threats against Embedded Systems

Detecting Privileged Side-Channel Attacks in Shielded Execution with Déjà Vu

To Update or Not to Update: Insights From a Two-Year Study of Android App Evolution

Lightweight Swarm Attestation: A Tale of Two LISA-s

Strict Virtual Call Integrity Checking for C++ Binaries

Functional Encryption with Oblivious Helper

DoS Attacks on Your Memory in Cloud

VTBPEKE: Verifier-based Two-Basis Password Exponential Key Exchange

Pinpointing Vulnerabilities

Understanding Human-Chosen PINs: Characteristics, Distribution and Security

Proofs of Data Residency: Checking whether Your Cloud Files Have Been Relocated

Scaling and Effectiveness of Email Masquerade Attacks: Exploiting Natural Language Generation

Secure Wallet-Assisted Offline Bitcoin Payments with Double-Spender Revocation

The Role of Hosting Providers in Fighting Command and Control Infrastructure of Financial Malware

SPOKE: Scalable Knowledge Collection and Attack Surface Analysis of Access Control Policy for Security Enhanced Android

Secure Integration of Web Content and Applications on Commodity Mobile Operating Systems

Securing Memory Encryption and Authentication Against Side-Channel Attacks Using Unprotected Primitives

DRIVE: Dynamic Runtime Integrity Verification and Evaluation

Group Signatures with Time-bound Keys Revisited: A New Model and an Efficient Construction

SECRET: On the Feasibility of a Secure, Efficient, and Collaborative Real-Time Web Editor

BRIDEMAID: An Hybrid Tool for Accurate Detection of Android Malware

POSTER: Enabling End-Users to Protect their Privacy

Advanced Security Research in the Era of the Internet of Things

SGX-Log: Securing System Logs With SGX

Toward Detecting Collusive Ranking Manipulation Attackers in Mobile App Markets

Model-based Attack Detection Scheme for Smart Water Distribution Networks

BinSequence: Fast, Accurate and Scalable Binary Code Reuse Detection

Mis-operation Resistant Searchable Homomorphic Encryption

Side Channels in Deduplication: Trade-offs between Leakage and Efficiency

Boosting the Guessing Attack Performance on Android Lock Patterns with Smudge Attacks

Extracting Conditional Formulas for Cross-Platform Bug Search

Evaluating Behavioral Biometrics for Continuous Authentication: Challenges and Metrics

EncKV: An Encrypted Key-value Store with Rich Queries

On the Detection of Kernel-Level Rootkits Using Hardware Performance Counters

Privacy-preserving and Optimal Interval Release for Disease Susceptibility

Automatically Inferring Malware Signatures for Anti-Virus Assisted Attacks

Android Database Attacks Revisited

DroidForensics: Accurate Reconstruction of Android Attacks via Multi-layer Forensic Logging

Don't Skype & Type!: Acoustic Eavesdropping in Voice-Over-IP

An Attack Against Message Authentication in the ERTMS Train to Trackside Communication Protocols

Almost Universal Forgery Attacks on the COPA and Marble Authenticated Encryption Algorithms

WedgeTail: An Intrusion Prevention System for the Data Plane of Software Defined Networks

How Discover a Malware using Model Checking

POSTER: Detecting Inter-App Information Leakage Paths

CoverUp: Privacy Through "Forced" Participation in Anonymous Communication Networks

The Circle Game: Scalable Private Membership Test Using Trusted Hardware

Collusive Data Leak and More: Large-scale Threat Analysis of Inter-app Communications

Towards Formal Security Analysis of Industrial Control Systems

PrivWatcher: Non-bypassable Monitoring and Protection of Process Credentials from Memory Corruption Attacks

A Ciphertext-Policy Attribute-based Encryption Scheme With Optimized Ciphertext Size And Fast Decryption

Sharing Proofs of Retrievability across Tenants

What You See is Not What You Get: Leakage-Resilient Password Entry Schemes for Smart Glasses

Discovering Logical Vulnerabilities in the Wi-Fi Handshake Using Model-Based Testing

Pass-O: A Proposal to Improve the Security of Pattern Unlock Scheme

MoPS: A Modular Protection Scheme for Long-Term Storage

Gossip: Automatically Identifying Malicious Domains from Mailing List Discussions

Towards Extending Noiseless Privacy: Dependent Data and More Practical Approach

PayBreak: Defense Against Cryptographic Ransomware

TriFlow: Triaging Android Applications using Speculative Information Flows

DroidPill: Pwn Your Daily-Use Apps

Hit by the Bus: QoS Degradation Attack on Android

Using Program Analysis to Synthesize Sensor Spoofing Attacks

A Terrorist-fraud Resistant and Extractor-free Anonymous Distance-bounding Protocol

The Case for In-Network Replay Suppression

POSTER: Detection of Information Leaks via Reflection in Android Apps

Control-Flow Hijacking: Are We Making Progress?

Memory Safety for Embedded Devices with nesCheck

Breaking Ad-hoc Runtime Integrity Protection Mechanisms in Android Financial Apps

On the Robustness of RSA-OAEP Encryption and RSA-PSS Signatures Against (Malicious) Randomness Failures

Cache-Based Application Detection in the Cloud Using Machine Learning

Updatable Block-Level Message-Locked Encryption

Practical Black-Box Attacks against Machine Learning

BlindIDS: Market-Compliant and Privacy-Friendly Intrusion Detection System over Encrypted Traffic

SCM: Secure Code Memory Architecture

Heterogeneous Rainbow Table Widths Provide Faster Cryptanalyses

Taming Asymmetric Network Delays for Clock Synchronization Using Power Grid Voltage

POSTER: Localization of Spoofing Devices using a Large-scale Air Traffic Surveillance System

Security in Personal Genomics: Lest We Forget

DataShield: Configurable Data Confidentiality and Integrity

LINCOS: A Storage System Providing Long-Term Integrity, Authenticity, and Confidentiality

An Efficient KP-ABE with Short Ciphertexts in Prime OrderGroups under Standard Assumption

Accurate Manipulation of Delay-based Internet Geolocation

POSTER: Traffic Analysis Attacks in Anonymity Networks

The Case for System Command Encryption

POSTER: Quantitative Security Assessment Method based on Entropy for Moving Target Defense

POSTER: A Behavioral Biometric Authentication Framework on Smartphones

POSTER: A Secure, Practical & Safe Packet Spoofing Service

Strict Virtual Call Integrity Checking for C++ Binaries

Content Provider	ACM Digital Library
Author	Stavrou, Angelos Fleck, Dan Elsabagh, Mohamed
Abstract	Modern operating systems are equipped with defenses that render legacy code injection attacks inoperable. However, attackers can bypass these defenses by crafting attacks that reuse existing code in a program's memory. One of the most common classes of attacks manipulates memory data used indirectly to execute code, such as function pointers. This is especially prevalent in C++ programs, since tables of function pointers (vtables) are used by all major compilers to support polymorphism. In this paper, we propose VCI, a binary rewriting system that secures C++ binaries against vtable attacks. VCI works directly on stripped binary files. It identifies and reconstructs various C++ semantics from the binary, and constructs a strict CFI policy by resolving and pairing virtual function calls (vcalls) with precise sets of target classes. The policy is enforced by instrumenting checks into the binary at vcall sites. Experimental results on SPEC CPU2006 and Firefox show that VCI is significantly more precise than state-of-the-art binary solutions. Testing against the ground truth from the source-based defense GCC VTV, VCI achieved greater than 60% precision in most cases, accounting for at least 48% to 99% additional reduction in the attack surface compared to the state-of-the-art binary defenses. VCI incurs a 7.79% average runtime overhead which is comparable to the state-of-the-art. In addition, we discuss how VCI defends against real-world attacks, and how it impacts advanced vtable reuse attacks such as COOP.
Starting Page	140
Ending Page	154
Page Count	15
File Format	PDF
ISBN	9781450349444
DOI	10.1145/3052973.3052976
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2017-04-02
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Control flow integrity C++ Type-call pairing Static binary analysis Virtual table attacks
Content Type	Text
Resource Type	Article

Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302

See location in the Map
03222 282435
Mail: support@ndl.gov.in

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in