[논문]A CFI Countermeasure Against GOT Overwrite Attacks

Jeong, Seunghoon; Hwang, Jaejoon; Kwon, Hyukjin; Shin, Dongkyoo

doi:10.1109/access.2020.2975037

[해외논문] A CFI Countermeasure Against GOT Overwrite Attacks 원문보기

IEEE access : practical research, open solutions, v.8, 2020년, pp.36267 - 36280

Jeong, Seunghoon (Sejong University, Seoul, South Korea) , Hwang, Jaejoon (Hanwha Systems, Seongnam, South Korea) , Kwon, Hyukjin (Korea Ministry of National Defense, Information Planning Bureau, Seoul, South Korea) , Shin, Dongkyoo (Sejong University, Seoul, South Korea)

Abstract ▼ AI-Helper

In the Unix-like system, the Global Offset Table (GOT) overwrite attack is a long-lasting control flow hijacking attack. The attack, by leveraging the dynamic symbol binding mechanism, overwrites any GOT entry into the attacker's target address to take the execution flow on the library function call. Recently, Full Relro (Relocation Read only), which arranges the GOT section as read-only at program startup, is regarded as most useful against the threat. However, it entails nontrivial loading overhead and is not applicable to libraries. Furthermore, many software packages are currently distributed without Full Relro. As a result, programs are still exposed to the risk of GOT attacks. In this paper, we propose a CFI-based protection scheme against the GOT overwrite attack. Using dynamically bound function symbols as branch identifiers, the scheme secures inter-module function calls on PLT (Procedure Linkage Table) effectively with little performance overhead. Our LLVM based implementation and evaluation on binutils-gdb show that the branch protection scheme is difficult to bypass, fast, and compatible with existing library programs.

참고문헌 (62)

arXiv 1407 0549 Lockdown: Dynamic control-flow integrity payer 2014
10.1109/SP.2013.45
Qiu, Pengfei, Lyu, Yongqiang, Zhang, Jiliang, Wang, Dongsheng, Qu, Gang. Control Flow Integrity Based on Lightweight Encryption Architecture. IEEE transactions on computer-aided design of integrated circuits and systems : a publication of the IEEE Circuits and Systems Society, vol.37, no.7, 1358-1369.

상세보기
10.1145/2897937.2898061
10.1145/2897937.2898098
10.1007/978-3-319-26362-5_4
arXiv 1910 03034 Methodologies for quantifying (Re-)randomization security and timing under JIT-ROP salman ahmed 2019
Control Flow Integrity Design Documentation 0
10.2991/iccsee.2013.250
Zhang, Jiliang, Qi, Binhang, Qin, Zheng, Qu, Gang. HCIC: Hardware-Assisted Control-Flow Integrity Checking. IEEE Internet of things journal : a joint publication of the IEEE Sensors Council, the IEEE Communications Society, the IEEE Computer Society, the IEEE Signal Processing Society, vol.6, no.1, 458-471.

상세보기
Presser, Leon, White, John R.. Linkers and Loaders. ACM computing surveys, vol.4, no.3, 149-167.

상세보기
Too much PIE is bad for performance payer 2012
10.14722/ndss.2017.23199
10.1145/2593069.2596656
Proc 24th Secur Symp (USENIX Secur ) Control-flow bending: On the effectiveness of control-flow integrity carlini 2015 161
10.1145/2744769.2744847
Squeezing the Dynamic Loader for Fun and Profit zhang 2015
How to Hijack the Global Offset Table With Pointers for Root Shells 2020
Proc 23rd USENIX Secur Symp (USENIX Secur ) Stitching the gadgets: On the ineffectiveness of coarse-grained control-flow integrity protection davi 2014 401
Proc 23rd USENIX Secur Symp (USENIX Secur ) Enforcing forward-edge control-flow integrity in GCC & LLVM tice 2014 941
10.1109/SP.2014.43
10.14722/ndss.2015.23271
10.1007/978-3-319-20550-2_8
10.1145/2810103.2813646
10.1109/SP.2015.51
10.1145/3274694.3274739
10.1145/3243734.3243797
Chronobiologia 2020
LLVM Language Reference Manual 2020
Cross DSO CFI—LLVM and Android rohlf 2020
LLVM Link Time Optimization Design and Implementation 2020
LLD—The LLVM Linker 2020
Writing an LLVM Pass 2020
Name Mangling Demystified kefallonitis 2007
Symbol Versioning 2020
gdb and Binutils 2020
10.1145/1102120.1102165
PaX address space layout randomization (ASLR) 2020
10.1109/SP.2016.62
10.1145/3134600.3134640
10.1109/SecDev.2019.00022
Burow, Nathan, Carr, Scott A., Nash, Joseph, Larsen, Per, Franz, Michael, Brunthaler, Stefan, Payer, Mathias. Control-Flow Integrity : Precision, Security, and Performance. ACM computing surveys, vol.50, no.1, 1-33.

상세보기
Data Execution Prevention (DEP) 2019
Proc NDSS MoCFI: A framework to mitigate control-flow attacks on smartphones davi 2012 26 27
Proc IEEE Symp Secur Privacy Practical control flow integrity and randomization for binary executables zhang 2013 559
Proc 23rd Secur Symp (USENIX Secur ) ROP is still dangerous: Breaking modern defenses carlini 2014 385
10.1109/CGO.2004.1281665
Dynamic Linking With Large Number of DSOs Degrades Into Linear Lookup pluzhnikov 2020
Control flow guard 2020
Proc ACM Conf Comput Commun Secur The geometry of innocent flesh on the bone: Return-into-libc without function calls (on the x86) shacham 2007 552
Proc Usenix Secur Symp Control flow integrity for COTS binaries zhang 2013 337
Control-flow integrity 2020
Proc of USENIX Symp on Operating Systems Design and Implementation (OSDI) Shuffler: Fast and deployable continuous code re-randomization williams-king 2016 367
Niu, Ben, Tan, Gang. Modular control-flow integrity. ACM SIGPLAN notices : a monthly publication of the Special Interest Group on Programming Languages, vol.49, no.6, 577-587.

상세보기
10.1145/2382196.2382216
10.1109/SP.2018.00029
10.1109/CGO.2013.6494997
10.1109/SP.2012.39
Proc 21st Secur Symp (USENIX Secur ) Enhanced operating system security through efficient and fine-grained address space randomization giuffrida 2012 475
Conti, Mauro, Crane, Stephen, Frassetto, Tommaso, Homescu, Andrei, Koppen, Georg, Larsen, Per, Liebchen, Christopher, Perry, Mike, Sadeghi, Ahmad-Reza. Selfrando: Securing the Tor Browser against De-anonymization Exploits. Proceedings on privacy enhancing technologies, vol.2016, no.4, 454-469.

상세보기
10.1145/2857705.2857726
10.1109/ACSAC.2006.9

LOADING...

활용도 분석정보

상세보기

다운로드

내보내기

활용도 Top5 논문

해당 논문의 주제분야에서 활용도가 높은 상위 5개 콘텐츠를 보여줍니다.
더보기 버튼을 클릭하시면 더 많은 관련자료를 살펴볼 수 있습니다.

내보내기 구분	파일저장 인쇄 메일전송
구성항목	기본정보 상세정보 관리번호, 논문명, 저널/프로시딩명, 저자 , 발행년, 권, 호, 시작페이지, 끝페이지, 발행기관 관리번호, 논문명, 대등논문명, 저자 , 저널/프로시딩명, 발행기관, 발행년, 발행언어, 권, 호, 시작페이지, 끝페이지, ISBN, ISSN, 주제분야, 키워드, 초록(한글), 초록(영문), 저자(소속기관)
저장형식	Text(ASCII format) Excel format RefWorks Direct Export RIS format (for Reference Manager, ProCite, EndNote), Scholar's Aids, Mendeley
메일정보	받는사람 (필수) @ 보내는사람 (선택) @ 제목 내용 KISTI 검색결과 이메일 서비스
안내	총 건의 자료가 검색되었습니다. 다운받으실 자료의 인덱스를 입력하세요. (1-10,000) 검색결과의 순서대로 최대 10,000건 까지 다운로드가 가능합니다. 데이타가 많을 경우 속도가 느려질 수 있습니다.(최대 2~3분 소요) 다운로드 파일은 UTF-8 형태로 저장됩니다. 파일의 내용이 제대로 보이지 않을실 때는 웹브라우저 상단의 보기 -> 인코딩 -> 자동선택 여부를 확인하십시오. ~ Text(ASCII format) Excel format

연합인증

[해외논문] A CFI Countermeasure Against GOT Overwrite Attacks 원문보기

Abstract ▼ AI-Helper

참고문헌 (62)

이 논문을 인용한 문헌

연구과제 타임라인

활용도 분석정보

활용도 Top5 논문

관련 콘텐츠

원문 보기

원문 URL 링크

오픈액세스(OA) 유형

이 논문과 함께 이용한 콘텐츠

AI-Helper ※ AI-Helper는 오픈소스 모델을 사용합니다.

선택된 텍스트

연합인증

[해외논문] A CFI Countermeasure Against GOT Overwrite Attacks 원문보기

Abstract ▼ AI-Helper

참고문헌 (62)

이 논문을 인용한 문헌

연구과제 타임라인

전체(0) 논문(0) 특허(0) 보고서(0)

전체(0) 논문(0) 특허(0) 보고서(0)

활용도 분석정보

활용도 Top5 논문 더보기

관련 콘텐츠

원문 보기

원문 URL 링크

오픈액세스(OA) 유형

이 논문과 함께 이용한 콘텐츠

AI-Helper ※ AI-Helper는 오픈소스 모델을 사용합니다.

선택된 텍스트

활용도 Top5 논문