NDLI: VTPin: practical VTable hijacking protection for binaries

Please wait, while we are loading the content...

Formal security analysis of smart embedded systems

ELAR: extremely lightweight auditing and repairing for cloud security

Decomposition of MAC address structure for granular device inference

Life-experience passwords (LEPs)

Catching predators at watering holes: finding and understanding strategically compromised websites

Code obfuscation against symbolic execution attacks

On the (in)security of the latest generation implantable cardiac defibrillators and how to secure them

Theft-resilient mobile wallets: transparently authenticating NFC users with tapping gesture biometrics

Practical and secure dynamic searchable encryption via oblivious access on distributed data structure

ShieldFS: a self-healing, ransomware-aware filesystem

You can promote, but you can't hide: large-scale abused app detection in mobile app stores

Inferring browser activity and status through remote monitoring of storage usage

VTPin: practical VTable hijacking protection for binaries

Reliably determining data leakage in the presence of strong attackers

A security analysis of automated chinese turing tests

Spicy: a unified deep packet inspection framework for safely dissecting all your data

An ultra-lightweight white-box encryption scheme for securing resource-constrained IoT devices

Pileus: protecting user resources from vulnerable cloud services

Timing-based reconnaissance and defense in software-defined networks

Using image saliency and regions of interest to encourage stronger graphical passwords

The Achilles heel of OAuth: a multi-platform study of OAuth-based authentication

VulPecker: an automated vulnerability detection system based on code similarity analysis

Multi-receiver GPS spoofing detection: error models and realization

Gametrics: towards attack-resilient behavioral authentication with simple cognitive games

CoKey: fast token-based cooperative cryptography

Cypider: building community-based cyber-defense infrastructure for android malware detection

Swords and shields: a study of mobile game hacks and existing defenses

Amplifying side channels through performance degradation

LMP: light-weighted memory protection with hardware assistance

Sanitizing data is not enough!: towards sanitizing structural artifacts in flash media

The cross domain desktop compositor: using hardware-based video compositing for a multi-level secure user interface

Trace-free memory data structure forensics via past inference and future speculations

A multi-cloud based privacy-preserving data publishing scheme for the internet of things

Bootstrapping and maintaining trust in the cloud

RevProbe: detecting silent reverse proxies in malicious server infrastructures

CPAC: securing critical infrastructure with cyber-physical access control

Adaptive encrypted traffic fingerprinting with bi-directional dependence

EvilCoder: automated bug insertion

Location-enhanced authentication using the IoT: because you cannot be in two places at once

Device fingerprinting for augmenting web authentication: classification and analysis of methods

The cloudier side of cryptographic end-to-end verifiable voting: a security analysis of Helios

Intelligent, automated red team emulation

Understanding and defending the binder attack surface in Android

Efficient, adversarial neighbor discovery using logical channels on Microsoft Azure

FASE: functionality-aware security enforcement

Auror: defending against poisoning attacks in collaborative deep learning systems

CASTLE: CA signing in a touch-less environment

HERCULE: attack story reconstruction via community discovery on correlated log graph

VTPin: practical VTable hijacking protection for binaries

Content Provider	ACM Digital Library
Author	Athanasopoulos, Elias Kemerlis, Vasileios P. Giuffrida, Cristiano Sarbinowski, Pawel
Abstract	VTable hijacking has lately been promoted to the de facto technique for exploiting C++ applications, and in particular web browsers. VTables, however, can be manipulated without necessarily corrupting memory, simply by leveraging use-after-free bugs. In fact, in the recent Pwn2Own competitions all major web browsers were compromised with exploits that employed (among others) use-after-free vulnerabilities and VTable hijacking. In this paper, we propose VTPin: a system to protect against VTable hijacking, via use-after-free vulnerabilities, in large C++ binaries that cannot be re-compiled or re-written. The main idea behind VTPin is to pin all the freed VTable pointers on a safe VTable under VTPin's control. Specifically, for every object deallocation, VTPin deallocates all space allocated, but preserves and updates the VTable pointer with the address of the safe VTable. Hence, any dereferenced dangling pointer can only invoke a method provided by VTPin's safe object. Subsequently, all virtual-method calls due to dangling pointers are not simply neutralized, but they can be logged, tracked, and patched. Compared to other solutions that defend against VTable hijacking, VTPin exhibits certain characteristics that make it suitable for practical and instant deployment in production software. First, VTPin protects binaries, directly and transparently, without requiring source compilation or binary rewriting. Second, VTPin is not an allocator replacement, and thus it does not interfere with the allocation strategies and policies of the protected program; it intervenes in the deallocation process only when a virtual object is to be freed for preserving the VTable pointer. Third, VTPin is fast; Mozilla Firefox, protected with VTPin, experiences an average overhead of 1%-4.1% when running popular browser benchmarks.
Starting Page	448
Ending Page	459
Page Count	12
File Format	PDF
ISBN	9781450347716
DOI	10.1145/2991079.2991121
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2016-12-05
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Use-after-free Vtable protection Control-flow hijacking
Content Type	Text
Resource Type	Article

Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302

See location in the Map
03222 282435
Mail: support@ndl.gov.in

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in