DAMAS: Control-Data Isolation at Runtime through Dynamic Binary Modification - Archive ouverte HAL
Communication Dans Un Congrès Année : 2021

DAMAS: Control-Data Isolation at Runtime through Dynamic Binary Modification

Résumé

Memory corruption attacks have been a major issue in software security for over two decades and are still one of the most dangerous and widespread types of attacks nowadays. Among these attacks, control-flow hijack attacks are the most popular and powerful, enabling the attacker to execute arbitrary code inside the target process. Many approaches have been developed to mitigate such attacks and to prevent them from happening. One of these approaches is the Control-Data Isolation (CDI) that tries to prevent such attacks by removing their trigger from the code, namely indirect branches. This approach has been implemented as a compiler pass that replaces every indirect branches in the program with a table that leads the control-flow to direct hard-written branches. The drawback of this approach is that it needs the recompilation of the program. In this paper we present an approach and its implementation, DAMAS, a framework capable of deploying protections on a running software and use runtime information to optimize them during the process execution. We implemented a coarse-grain CDI protection using our framework and evaluated its impact on performance.
Fichier principal
Vignette du fichier
47.pdf (243.17 Ko) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-03340008 , version 1 (09-09-2021)

Identifiants

Citer

Camille Le Bon, Erven Rohou, Frédéric Tronel, Guillaume Hiet. DAMAS: Control-Data Isolation at Runtime through Dynamic Binary Modification. SILM 2021 - Workshop on the Security of Software / Hardware Interfaces, Sep 2021, digital event, Austria. pp.86-95, ⟨10.1109/EuroSPW54576.2021.00016⟩. ⟨hal-03340008⟩
170 Consultations
266 Téléchargements

Altmetric

Partager

More