Security bugs in embedded interpreters

Proceedings of the 4th Asia-Pacific Workshop on Systems, APSys 2013

Volumn , Issue , 2013, Pages

  Chen, Haogang ^a   Cutler, Cody ^a   Kim, Taesoo ^a   Mao, Yandong ^a   Wang, Xi ^a   Zeldovich, Nickolai ^a   Kaashoek, M Frans ^a  

^a MASSACHUSETTS INSTITUTE OF TECHNOLOGY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPRESSED FILES; EMBEDDED INTERPRETERS; IN-BUILDINGS; PACKET FILTERING; REVERSIBLE TRANSFORMATION; SECURITY BUGS; SECURITY VULNERABILITIES; SOFTWARE STACKS;

EID: 84883115659     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2500727.2500747     Document Type: Conference Paper

References (30)

1. Bitcoin. Script - Bitcoin, 2013. https://en.bitcoin.it/wiki/Script.
2. D. Blazakis. Interpreter exploitation: Pointer inference and JIT spraying. BlackHat DC, 2010.
3. C. Cadar, D. Dunbar, and D. Engler. KLEE: Unassisted and automatic generation of high-coverage tests for complex systems programs. In Proceedings of the 8th Symposium on Operating Systems Design and Implementation (OSDI), San Diego, CA, Dec. 2008.
4. J. Corbet. A JIT for packet filters, Apr. 2011. http://lwn.net/Articles/ 437981/.
5. R. Cox, T. Bergan, A. T. Clements, M. F. Kaashoek, and E. Kohler. Xoc, an extension-oriented compiler for systems programming. In Proceedings of the 13th International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS), pages 244-254, Seattle, WA, Mar. 2008.
6. DragonFlyBSD. Dragonflybsd bug 1748, 2010. http://bugs.dragonflybsd.org/ issues/1748.
7. W. Drewry. SECure COMPuting with filters, Jan. 2012. http://lwn.net/ Articles/498231/.
8. D. R. Engler. VCODE: A retargetable, extensible, very fast dynamic code generation system. In Proceedings of the 1996 ACM SIGPLAN Conference on Programming Language Design and Implementation (PLDI), pages 160- 170, Philadelphia, PA, June 1996.
9. D. R. Engler, M. F. Kaashoek, and J. W. O'Toole. Exokernel: An operating system architecture for application-level resource management. In Proceedings of the 15th ACM Symposium on Operating Systems Principles (SOSP), Copper Mountain, CO, Dec. 1995.
10. P. Godefroid, M. Y. Levin, and D. Molnar. SAGE: Whitebox fuzzing for security testing. Communications of the ACM, 55(3):41-44, Jan. 2012.
11. Hewlett-Packard, Intel, Microsoft, Phoenix, and Toshiba. Advanced configuration and power interface specification, Dec. 2011. http://www.acpi. info/DOWNLOADS/ACPIspec50.pdf.
12. A. S. Incorporated. The type 2 charstring format, Mar. 2000. http://partners.adobe.com/public/developer/en/font/5177.Type2.pdf.
13. A. Kuznetosv. SS utility: Quick intro, Sept. 2001. http://www.cyberciti. biz/files/ss.html.
14. K. McAllister. Attacking hardened Linux systems with kernel JIT spraying, Nov. 2012. http://mainisusuallyafunction.blogspot.com/2012/11/attacking- hardened-linux-systems-with.html.
15. S. McCanne and V. Jacobson. The BSD packet filter: A new architecture for user-level packet capture. In Proceedings of the Winter 1993 USENIX Annual Technical Conference, San Diego, CA, Jan. 1993.
16. S. Nakamoto. Bitcoin: A peer-to-peer electronic cash system, 2008. http://bitcoin.org/bitcoin.pdf.
17. T. Ormandy. Fun with constrained programming, 2012. http://blog. cmpxchg8b.com/2012/09/fun-with-constrained-programming.html.
18. A. Pitrou. Pickle protocol version 4. PEP 3154, Dec. 2011. http://www.python.org/dev/peps/pep-3154.
19. R. Price, C. Bormann, J. Christoffersson, H. Hannu, Z. Liu, and J. Rosenberg. Signaling compression (SigComp). RFC 3320, Jan. 2003. http://www.ietf.org/rfc/rfc3320.txt.
20. C. Reis, A. Barth, and C. Pizano. Browser security: Lessons from Google Chrome. Communications of the ACM, 52(8):45-49, June 2009.
21. C. Rohlf and Y. Ivnitskiy. The security challenges of clientside just-in-time engines. Security & Privacy, IEEE, 10 (2):84-86, 2012.
22. H. Shacham. The geometry of innocent flesh on the bone: Return-into-libc without function calls (on the x86). In Proceedings of the 14th ACM Conference on Computer and Communications Security (CCS), pages 552-561, Alexandria, VA, Oct.-Nov. 2007.
23. H. Shacham, M. Page, B. Pfaff, E.-J. Goh, N. Modadugu, and D. Boneh. On the effectiveness of address-space randomization. In Proceedings of the 11th ACM Conference on Computer and Communications Security (CCS), pages 298-307, Washington, DC, Oct. 2004.
24. J. Sigwald. Analysis of the jailbreakme v3 font exploit, July 2011. http://esec-lab.sogeti.com/post/Analysis-of-the-jailbreakme-v3-font-exploit.
25. M. Slaviero. Sour pickles: Shellcoding in Python's serialisation format, 2011. https://media.blackhat.com/bh-us-11/Slaviero/BH-US-11-Slaviero-Sour- Pickles-WP.pdf.
26. TrueType. The instruction set, 2011. https://developer.apple.com/fonts/ TTRefMan/RM05/Chap5.html.
27. TrueType. TrueType hinting, 2012. http://www.truetype-typography.com/ tthints.htm.
28. R. Wahbe, S. Lucco, T. E. Anderson, and S. L. Graham. Efficient software-based fault isolation. In Proceedings of the 14th ACM Symposium on Operating Systems Principles (SOSP), pages 203-216, Asheville, NC, Dec. 1993.
29. X. Wang, H. Chen, Z. Jia, N. Zeldovich, and M. F. Kaashoek. Improving integer security for systems with KINT. In Proceedings of the 10th Symposium on Operating Systems Design and Implementation (OSDI), pages 163-177, Hollywood, CA, Oct. 2012.
30. A. Wu. Bytecode signatures for polymorphic malware, Nov. 2010. http://blog.clamav.net/2011/11/bytecode-signatures-for-polymorphic.html.