Loading...
Please wait, while we are loading the content...
Similar Documents
ROPdefender: A detection tool to defend against return-oriented programming attacks. http://www.trust.rub.de/media/trust/veroeffentlichungen/ 2010/03/20/ROPdefender.pdf (2010)
| Content Provider | CiteSeerX |
|---|---|
| Author | Win, Marcel Davi, Lucas Sadeghi, Ahmad-Reza |
| Abstract | Modern runtime attacks increasingly make use of the powerful return-oriented programming (ROP) attack techniques and principles such as recent attacks on Apple iPhone and Acrobat products to name some. These attacks even work under the presence of modern memory protection mechanisms such as data execution prevention (DEP). In this paper, we present our tool, ROPdefender, that dynamically detects conventional ROP attacks (that are based on return instructions). In contrast to existing solutions, ROPdefender can be immediately deployed by end-users, since it does not rely on side information (e.g., source code or debugging information) which are rarely provided in practice. Currently, our tool adds a runtime overhead of 2x which is comparable to similar instrumentation-based tools. |
| File Format | |
| Publisher Date | 2010-01-01 |
| Publisher Institution | technische Universität Darmstadt Technische Universität Darmstadt |
| Access Restriction | Open |
| Subject Keyword | Medium Trust Veroeffentlichungen Runtime Overhead Modern Runtime Attack Source Code Conventional Rop Attack Attack Technique Acrobat Product Side Information Return-oriented Programming Attack Return Instruction Similar Instrumentation-based Tool Recent Attack Modern Memory Protection Mechanism Data Execution Prevention Powerful Return-oriented Programming Detection Tool Apple Iphone |
| Content Type | Text |
