Effective entropy: Security-centric metric for memory randomization techniques

7th Workshop on Cyber Security Experimentation and Test, CSET 2014

Volumn , Issue , 2014, Pages

  Herlands, William ^a   Hobson, Thomas ^a   Donovan, Paula J ^a  

^a MIT LINCOLN LABORATORY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ENTROPY;

ADDRESS SPACE LAYOUT RANDOMIZATIONS; COMPUTING SYSTEM; EFFECTIVE ENTROPIES; FINE GRAINS; LOW ENTROPY; QUANTITATIVE METRICS; RANDOMIZATION TECHNIQUES; USER SPACES;

RANDOM PROCESSES;

EID: 85084163668     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (25)

1. BHATKAR, S., AND SEKAR, R. Data space randomization. DIMVA’08, Springer-Verlag, pp. 1–22.
2. BLETSCH, T., JIANG, X., FREEH, V. W., AND LIANG, Z. Jump-oriented programming: a new class of code-reuse attack. ASIACCS’11, ACM, pp. 30–40.
3. BOEHM, H.-J. Space efficient conservative garbage collection. PLDI’93, ACM, pp. 197–206.
4. CANONICAL LTD. Ubuntu security features.
5. CHECKOWAY, S., DAVI, L., DMITRIENKO, A., SADEGHI, A.-R., SHACHAM, H., AND WINANDY, M. Return-oriented programming without returns. CCS’10, ACM, pp. 559–572.
6. COWAN, C., PU, C., MAIER, D., HINTON, H., WALPOLE, J., BAKKE, P., BEATTIE, S., GRIER, A., WAGLE, P., ZHANG, Q., ET AL. Stackguard: Automatic adaptive detection and prevention of buffer-overflow attacks. vol. 81 of USENIX Security’98, pp. 346–355.
7. DE RAADT, T. The OpenBSD 5.3 release.
8. DING, Y., WEI, T., WANG, T., LIANG, Z., AND ZOU, W. Heap taichi: exploiting memory allocation granularity in heap-spraying attacks. ACSAC’10, ACM, pp. 327–336.
9. ETOH, H., AND YODA, K. Propolice: Improved stacksmashing attack detection. IPSJ SIG Notes 75 (2001), 181–188.
10. GIUFFRIDA, C., KUIJSTEN, A., AND TANENBAUM, A. S. Enhanced operating system security through efficient and fine-grained address space randomization. In USENIX Security’12.
11. HISER, J., NGUYEN-TUONG, A., CO, M., HALL, M., AND DAVIDSON, J. Ilr: Where’d my gadgets go? In IEEE S&P’12, pp. 571–585.
12. JACKSON, T., HOMESCU, A., CRANE, S., LARSEN, P., BRUNTHALER, S., AND FRANZ, M. Diversifying the software stack using randomized nop insertion. In Moving Target Defense. 2013, pp. 151–173.
13. KC, G. S., KEROMYTIS, A. D., AND PREVELAKIS, V. Countering code-injection attacks with instruction-set randomization. CCS’03, ACM, pp. 272–280.
14. KIL, C., JIM, J., BOOKHOLT, C., XU, J., AND NING, P. Address space layout permutation (aslp): Towards fine-grained randomization of commodity software. ACSAC’06, pp. 339–348.
15. PAPPAS, V., POLYCHRONAKIS, M., AND KEROMYTIS, A. D. Smashing the gadgets: Hindering return-oriented programming using in-place code randomization. In IEEE S&P’12, pp. 601–615.
16. SCHWARTZ, E. J., AVGERINOS, T., AND BRUMLEY, D. Q: exploit hardening made easy. USENIX Security’11, pp. 25–25.
17. SERNA, F. J. The info leak era on software exploitation. In Black Hat USA (2012).
18. SHACHAM, H. The geometry of innocent flesh on the bone: return-into-libc without function calls (on the x86). CCS’07, ACM, pp. 552–561.
19. SHACHAM, H., PAGE, M., PFAFF, B., GOH, E.-J., MODADUGU, N., AND BONEH, D. On the effectiveness of address-space randomization. CCS’04, ACM, pp. 298–307.
20. SNOW, K. Z., MONROSE, F., DAVI, L., DMITRIENKO, A., LIEBCHEN, C., AND SADEGHI, A.-R. Just-in-time code reuse: On the effectiveness of fine-grained address space layout randomization. 574–588.
21. SOTIROV, A., AND DOWD, M. Bypassing browser memory protections in windows vista. Blackhat USA (2008).
22. SZEKERES, L., PAYER, M., WEI, T., AND SONG, D. Sok: Eternal war in memory. In IEEE S&P’13, pp. 48–62.
23. WANG, T., WEI, T., LIN, Z., AND ZOU, W. Intscope: Automatically detecting integer overflow vulnerability in x86 binary using symbolic execution. In NDSS’09.
24. WARTELL, R., MOHAN, V., HAMLEN, K. W., AND LIN, Z. Binary stirring: self-randomizing instruction addresses of legacy x86 binary code. CCS’12, ACM, pp. 157–168.
25. WOJTCZUK, R. The advanced return-into-lib (c) exploits: Pax case study. Phrack Magazine, Volume 0x0b, Issue 0x3a, Phile# 0x04 of 0x0e (2001).