Secure dynamic code generation against Spraying

Proceedings of the ACM Conference on Computer and Communications Security

Volumn , Issue , 2010, Pages 738-740

  Tao, Wei ^a   Tielei, Wang ^a   Lei, Duan ^a   Jing, Luo ^b  

^a PEKING UNIVERSITY   (China)

^b INSTITUTE OF BIOPHYSICS   (China)

Author keywords

INSeRT; JIT Spraying; Just In Time compilation

Indexed keywords

ABSTRACT MODELS; DYNAMIC CODE GENERATION; INSERT; INTRINSIC ELEMENTS; JAVASCRIPT; JIT-SPRAYING; JUST-IN-TIME COMPILATION; MACHINE INSTRUCTIONS; OPERATING SYSTEMS; PROTECTION MECHANISMS; PROTECTION METHODS; WEB 2.0;

COMPUTER OPERATING SYSTEMS; JUST IN TIME PRODUCTION; NETWORK COMPONENTS;

PROGRAM COMPILERS;

EID: 78650010363     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1866307.1866415     Document Type: Conference Paper

References (9)

1. Keppel, D., Eggers, S.J., and Henry, R.R. 1991. A case for runtime code generation. Technical Report CSE-91-11-04, University of Washington.
2. Aycock, J. 2003. A brief history of just-in-time. ACM Computing Surveys, 35,2 (2003), 97-113.
3. Google Inc. 2010. V8 JavaScript Engine. http://code.google.com/apis/v8/ design.html.
4. Blazakis, D. 2010. Interpreter exploitation: Pointer inference and jit spraying. In Black Hat DC, USA, 2010.
5. SkyLined. 2004. Internet Explorer IFRAME src&name parameter BoF remote compromise. http://skypher.com/wiki/index.php?title=Www.edup.tudelft.nl/ ~bjwever/advisory-iframe.html.php.
6. Microsoft Inc. 2010. Data Execution Prevention: frequently asked questions. http://windows.microsoft.com/en-US/windows-vista/Data-Execution- Prevention-frequentlyasked-questions.
7. Whitehouse, O. 2007. An Analysis of Address Space Layout Randomization on Windows Vista. http://www.symantec.com/avcenter/reference/Address-Space-Layout- Randomization.pdf.
8. Sintsov, A. 2010. Writing JIT-Spray Shellcode for fun and profit. Digital Security Research Group. http://www.dsecrg.com/files/pub/pdf/ Writing%20JITSpray%20Shellcode%20for%20fun%20and%20profit.pdf.
9. Wikipedia. 2010. V8 (JavaScript engine). http://en.wikipedia.org/wiki/V8- (JavaScript-engine)