Modular Control-Flow Integrity

ACM SIGPLAN Notices

Volumn 49, Issue 6, 2014, Pages 577-587

  Niu, Ben ^a   Tan, Gang ^a  

^a LEHIGH UNIVERSITY   (United States)

Author keywords

Control flow integrity; Modularity; Separate compilation

Indexed keywords

DATA FLOW ANALYSIS; DATA STRUCTURES;

CONTROL FLOW GRAPHS; CONTROL-FLOW INTEGRITIES; DYNAMIC LINKING; MODULAR CONTROL; MODULARITY; SEPARATE COMPILATION; SOFTWARE HARDENINGS; THREAD SAFETIES;

FLOW GRAPHS;

EID: 84907021132     PISSN: 15232867     EISSN: None     Source Type: Journal    
DOI: 10.1145/2594291.2594295     Document Type: Conference Paper

References (27)

1. LLVM. http://llvm.org.
2. Simple, non-scalable reader-preference lock. http://www.cs.rochester.edu/research/synchronization/pseudocode/rw.html.
3. M. Abadi, M. Budiu, Ú. Erlingsson, and J. Ligatti. Control-flow integrity. In 12th ACM Conference on Computer and Communications Security (CCS), pages 340-353, 2005.
4. P. Akritidis, C. Cadar, C. Raiciu, M. Costa, and M. Castro. Preventing memory error exploits with WIT. In IEEE Symposium on Security and Privacy (S&P), pages 263-277, 2008.
5. J. Ansel, P. Marchenko, Ú. Erlingsson, E. Taylor, B. Chen, D. Schuff, D. Sehr, C. Biffle, and B. Yee. Language-independent sandboxing of just-in-time compilation and self-modifying code. In ACM Conference on Programming Language Design and Implementation (PLDI), pages 355-366, 2011.
6. L. Dalessandro, D. Dice, M. Scott, N. Shavit, and M. Spear. Transactional mutex locks. In Proceedings of the 16th International Euro-Par Conference on Parallel Processing: Part II, Euro-Par'10, pages 2-13, Berlin, Heidelberg, 2010. Springer-Verlag. ISBN 3-642-15290-2, 978-3-642-15290-0.
7. L. Davi, R. Dmitrienko, M. Egele, T. Fischer, T. Holz, R. Hund, S. Nurnberger, and A. reza Sadeghi. MoCFI: A framework to mitigate control-flow attacks on smartphones. In Network and Distributed System Security Symposium (NDSS), 2012.
8. D. Dechev. The ABA problem in multicore data structures with collaborating operations. In 7th International Conference on Collaborative Computing: Networking, Applications andWorksharing (Collaborate-Com), pages 158-167, 2011.
9. Ú. Erlingsson, M. Abadi, M. Vrable, M. Budiu, and G. Necula. XFI: Software guards for system address spaces. In USENIX Symposium on Operating Systems Design and Implementation (OSDI), pages 75-88, 2006.
10. E. Goktas, E. Athanasopoulos, H. Bos, and G. Portokalidis. Out of control: Overcoming control-flow integrity. In Security & Privacy (Oakland), San Jose, CA, USA, May 2014. IEEE.
11. M. P. Herlihy and J. M. Wing. Linearizability: a correctness condition for concurrent objects. ACM Transactions on Programming Languages and Systems, 12(3):463-492, July 1990.
12. J. Li, Z. Wang, X. Jiang, M. Grace, and S. Bahram. Defeating returnoriented rootkits with "return-less" kernels. In Proceedings of the 5th European Conference on Computer Systems, pages 195-208, 2010.
13. S. McCamant and G. Morrisett. Evaluating SFI for a CISC architecture. In 15th Usenix Security Symposium, 2006.
14. G. Morrisett, G. Tan, J. Tassarotti, J.-B. Tristan, and E. Gan. Rocksalt: Better, faster, stronger SFI for the x86. In ACM Conference on Programming Language Design and Implementation (PLDI), pages 395-404, 2012.
15. Nergal. The advanced return-into-lib(c) exploits: Pax case study. Phrack Magazine, Volume 11, Issue 0x58, File 4 of 14, 2001.
16. B. Niu and G. Tan. Monitor integrity protection with space efficiency and separate compilation. In Proceedings of the 2013 ACM SIGSAC Conference on Computer & Communications Security, CCS '13, pages 199-210, 2013. .
17. J. Pewny and T. Holz. Control-flow restrictor: Compiler-based CFI for iOS. In ACSAC '13: Proceedings of the 2013 Annual Computer Security Applications Conference, 2013.
18. D. Sehr, R. Muth, C. Biffle, V. Khimenko, E. Pasko, K. Schimpf, B. Yee, and B. Chen. Adapting software fault isolation to contemporary CPU architectures. In 19th Usenix Security Symposium, pages 1-12, 2010.
19. H. Shacham. The geometry of innocent flesh on the bone: return-intolibc without function calls (on the x86). In 14th ACM Conference on Computer and Communications Security (CCS), pages 552-561, 2007.
20. N. Shavit and D. Touitou. Software transactional memory. In Proceedings of the fourteenth annual ACM symposium on Principles of distributed computing, PODC '95, pages 204-213, 1995.
21. Z. Wang and X. Jiang. Hypersafe: A lightweight approach to provide lifetime hypervisor control-flow integrity. In IEEE Symposium on Security and Privacy (S&P), pages 380-395, 2010.
22. B. Yee, D. Sehr, G. Dardyk, B. Chen, R. Muth, T. Ormandy, S. Okasaka, N. Narula, and N. Fullagar. Native client: A sandbox for portable, untrusted x86 native code. In IEEE Symposium on Security and Privacy (S&P), May 2009.
23. B. Zeng, G. Tan, and G. Morrisett. Combining control-flow integrity and static analysis for efficient and validated data sandboxing. In 18th ACM Conference on Computer and Communications Security (CCS), pages 29-40, 2011.
24. B. Zeng, G. Tan, and Ú. Erlingsson. Strato: A retargetable framework for low-level inlined-reference monitors. In 22nd Usenix Security Symposium, pages 369-382, 2013.
25. C. Zhang, T. Wei, Z. Chen, L. Duan, L. Szekeres, S. McCamant, D. Song, and W. Zou. Practical control flow integrity and randomization for binary executables. In IEEE Symposium on Security and Privacy (S&P), pages 559-573, 2013.
26. M. Zhang and R. Sekar. Control flow integrity for COTS binaries. In 22nd Usenix Security Symposium, pages 337-352, 2013.
27. L. Zhao, G. Li, B. D. Sutter, and J. Regehr. Armor: Fully verified software fault isolation. In 11th Intl. Conf. on Embedded Software. ACM, 2011.