检索结果-内蒙古大学图书馆

10th IEEE International Conference on Electronics Information and Emergency Communication (IEEE ICEIEC)

作者： Zhou, Sun Chen, Jun Xiamen Univ Dept Automat Xiamen 361005 Fujian Peoples R China

ISBN: (纸本)9781728163130;9781728163123

buffer overflow attack is one of the mainstream attacks towards the ARM architecture. It may lead to consequences such as program failure or system privileges loss. The mainstream operating systems deploy multiple defense mechanisms to mitigate such attacks. However, so far there are few reports on evaluation of the defense capability of ARM-based operating systems from buffer overflow attacks. In this paper, firstly, we implemented the Runtime Intrusion Prevention Evaluator on ARM-based operating systems, which we called RIPE-ARM. In that evaluator, 850 kinds of effective buffer overflow attacks are integrated for test. Secondly, by using the QEMU virtual machine, an ARM-based system, Raspberry Pi, was set up for the experiment;and then, the RIPE-ARM was used to test and evaluate the defense capability of Raspberry Pi. We identified the kinds of attacks that each defense or defense combination can successfully prevent, respectively. Among all the defense methods, the Canary + DEP combination turns out to be optimal that is able to make 840 out of the total 850 kinds of attacks fail. Furthermore, for comparison, the defense capability of Ubuntu 16.04 LTS system based on X86 architecture was also tested. The results show that the optimal defense method of that system can prevent only 790 attack kinds.

关键词： buffer overflow attack ARM architecture defense mechanism wireless network security

来源：评论

学校读者我要写书评

暂无评论

Trusted dynamic measurement scheme against buffer overflow attack

Trusted dynamic measurement scheme against buffer overflow a...

引用

2014 International Conference on Communication Technology and Application(CTA2014)

作者： L.B.Zeng R.H.Zhang Y.Song School of Computer Science and Technology Shandong University

ISBN: (纸本)9781845649302

In trusted computing, trusted measurement is a fundamental technology. Whether the measurement results can correctly represent the status of computer system will influence the effect of trusted authentication between trusted platforms. However, the trusted measurement standard of Trusted Computing Group(TCG) admits potential for time-of-check time-of-use(TOC-TOU) vulnerability. To solve this problem, a new dynamic measurement scheme is proposed which can successfully protect stack segment in memory and detect buffer overflow abnormalities during execution of computer platform. Both of Bochs virtual machine and Linux operating system are used to verify this scheme, and experimental results show that it can defense buffer overflow attacks and have good time and space feasibility.

关键词： trusted computing trusted dynamic measurement buffer overflow attack stack manage

来源：评论

学校读者我要写书评

暂无评论

Compromising an IoT device based on Harvard-architecture microcontroller

Compromising an IoT device based on Harvard-architecture mic...

引用

SPIE-IEEE-PSP WILGA on Photonics Applications in Astronomy, Communications, Industry, and High-Energy Physics Experiments

作者： Cabaj, Krzysztof Mazur, Grzegorz Nosek, Mateusz Warsaw Univ Technol Inst Comp Sci Nowowiejska 15-19 PL-00665 Warsaw Poland

ISBN: (数字)9781510622043

ISBN: (纸本)9781510622043

The paper describes the concept and implementation of an attack technique, targeting an Internet-connected device based on Arduino family board and modules with an ATmega microcontoller. Due to Harvard-like architecture of the microcontroller, the attack uses return-oriented programming principle, utilizing the pieces of firmware already contained in the memory of target device. We show that the routines present in the device are sufficient to convey a successful attack and change the device operation in the presence of buffer overflow backdoor to the firmware.

关键词： embedded system microcontroller Harvard architecture AVR architecture IoT device buffer overflow attack return-oriented programming gadgets

来源：评论

学校读者我要写书评

暂无评论

A Mathematical Model of Mitigating Memory Randomization Weakness via Moving Target Defense

A Mathematical Model of Mitigating Memory Randomization Weak...

引用

International Conference on Computational Science and Computational Intelligence (CSCI)

作者： Aldossary, Sultan Allen, William Zhang, Shengzhi Florida Inst Technol Sch Comp Melbourne FL 32901 USA Prince Sattam Bin Abdulaziz Univ Al Kharj Saudi Arabia

ISBN: (纸本)9781538626528

The address space randomization technique was proposed to make determining the address of a shared library more difficult since each instance of the program is loaded into a random base address. However, when address space randomization layout (ASLR) is implemented on a 32-bit system, an attacker can use a brute force attack to guess the address of the shared library. The main goal of the research described in this paper is to study the use of a dispatching algorithm and multiple back-end servers as a moving target defense technique to mitigate ASLR weaknesses. First, we present a brute force attack when the number of servers is known. Second, we present a brute force attack when the number of servers is unknown. Last, we present the probability of the attacker's success on both of the attacks.

关键词： buffer overflow attack

来源：评论

学校读者我要写书评

暂无评论

A Behavior-based buffer overflow attack Blocker

引用

电脑知识与技术 2010年第4期6卷 2544-2549页

作者： ZHANG Li-yuan Jin Li Department of Computer Science and Technology Tongji University Shanghai 201804 China

A common way to gain control of victim hosts is to launch buffer overflow attacks by remote *** paper proposes a behavior-based buffer overflow attacker blocker,which can dynamically detect and prevent remote buffer overflow attacks by filtering out the client requests that contain malicious executable *** important advantage of this approach is that it can block the attack before the exploit code begins affecting the target *** blocker is composed of three major components,packet decoder,disassembler,and behavior-based detection *** decodes the network packets,extract possible instruction sequences from the payload,and analyzes whether they contain attack *** this blocker based its effectiveness on the commonest behavior patterns of buffer overflow shellcode,it is expected to detect not only existing attacks but also zero-day ***,it has the capability of detecting attack-size obfuscation.

关键词： cyber security buffer overflow attack dynamic prevention and detection,shellcode behavior pattern

来源：评论

学校读者我要写书评

暂无评论

Demonstrated LLC-Layer attack and Defense Strategies for Wireless Communication Systems

Demonstrated LLC-Layer Attack and Defense Strategies for Wir...

引用

IEEE Conference on Communications and Network Security (CNS)

作者： Hitefield, S. Nguyen, V. Carlson, C. O'Shea, T. Clancy, T. Virginia Tech Arlington VA 22203 USA

ISBN: (纸本)9781479958900

In this work we demonstrate an over-the-air capability to exploit software weaknesses in the signal processing code implementing the physical and link layers of the OSI stack. Our test bed includes multiple nodes leveraging both GNU Radio and the Universal Software Radio Peripheral to demonstrate these attacks and corresponding defensive strategies. More specifically, we examine two duplex modem implementations, continuous wave and OFDM, and a link layer framing protocol vulnerable to buffer overflow attacks. We also discuss possible attacks against the network layer and above by exploiting a waveform utilizing the GNU Radio tunnel/tap block, which allows the waveform to directly interact with the Linux kernel's network stack. Lastly, we consider several different defensive countermeasures, both active and passive, for detecting vulnerabilities in the waveform implementation and also detecting malicious activity in the system. These mitigation strategies should be used to protect communications systems from succumbing to similar classes of attacks.

关键词： Linux OFDM modulation modems open systems operating system kernels protocols radio networks signal processing software radio telecommunication security GNU radio tunnel LLC-layer attack Linux kernel network stack OFDM OSI stack buffer overflow attack communication system protection continuous wave duplex modem implementation link layer framing protocol malicious activity detection physical layer signal processing code implemention universal software radio peripheral wireless communication system Payloads Protocols Receivers Security Software Wireless communication

来源：评论

学校读者我要写书评

暂无评论

A Robust Kernel-Based Solution to Control-Hijacking buffer overflow attacks

引用

JOURNAL OF INFORMATION SCIENCE AND ENGINEERING 2011年第3期27卷 869-890页

作者： Chen, Li-Han Hsu, Fu-Hau Huang, Cheng-Hsien Ou, Chih-Wen Lin, Chia-Jun Liu, Szu-Chi Natl Cent Univ Dept Comp Sci & Informat Engn Tao Yuan 320 Taiwan

In this paper, we propose a robust kernel-based solution, called AURORA, to a ubiquitous security problem - control-hijacking buffer overflow attacks (BOAs). AURORA utilizes either the addresses of the buffers storing input strings or signatures to detect and block control-hijacking BOA strings in the kernel, including zero-day ones. Although AURORA detects some types of BOAs through signatures, AURORA does not need to create any new signature for new attack instances after its installation because AURORA's signatures are created based on commonality of control-hijacking BOAs. Moreover, even a process is under a BOA, AURORA allows it to continue its execution or to be terminated gracefully without the cost of process idleness or repeated process crashes. Thus, AURORA is robust to control-hijacking BOAs. AURORA does not need to modify the source code of any application programs. Furthermore, AURORA is compatible with existing operating systems and application programs;hence, AURORA could work with other protection mechanisms to provide an extra layer of protection. Our experimental results show that with less than 1% overhead and negligible false positives, AURORA can accurately block various control-hijacking BOAs.

关键词： buffer overflow attack stack smashing attack return-into-libc attack AURORA control hijacking BOA

来源：评论

学校读者我要写书评

暂无评论

AIFD: A runtime solution to buffer overflow attack

AIFD: A runtime solution to buffer overflow attack

引用

6th International Conference on Machine Learning and Cybernetics

作者： Han, Hong Lu, Xian-Liang Ren, Li-Yong Chen, Bo Yang, Ning Univ Elect Sci & Technol China Coll Comp Sci & Engn Chengdu 610054 Peoples R China

ISBN: (纸本)9781424409723

While buffer overflow problem has been known for a long time, it continues to present a serious security threat. Many solutions to the notorious problem were proposed. However, they had,their own-drawbacks. This paper presents a solution called API invocation fingerprint detection (AIFD) to eliminate overflow vulnerability with very low performance penalty. The solution is API-hook-based, which does not require compiler extensions or operating system kernel patches. Unlike other API-hook-based solutions, which will not discover that system calls are actually invoked by malicious code in certain cases, AIFD works well in those cases. By it, programs protected will not yield control to the exploitation code, but rather enter a fail-safe state. In this paper, we present principle of buffer overflow attacks, implementation details of AIFD, and experimental results of both penetration resistance and the performance impact of this solution.

关键词： buffer overflow attack AIFD API hook

来源：评论

学校读者我要写书评

暂无评论

AIFD: A RUNTIME SOLUTION TO buffer overflow attack

AIFD: A RUNTIME SOLUTION TO BUFFER OVERFLOW ATTACK

引用

2007 International Conference on Machine Learning and Cybernetics(IEEE第六届机器学习与控制论国际会议)

作者： HONG HAN XIAN-LIANG LU LI-YONG REN BO CHEN NING YANG College of Computer Science and Engineering University of Electronic Science and Technology of China Chengdu 610054

While buffer overflow problem has been known for a long time, it continues to present a serious security *** solutions to the notorious problem were ***, they had their own *** paper presents a solution called API invocation fingerprint detection (AIFD) to eliminate overflow vulnerability with very low performance *** solution is API-hook-based, which does not require compiler extensions or operating system kernel *** other API-hook-based solutions, which will not discover that system calls are actually invoked by malicious code in certain cases, AIFD works well in those *** it, programs protected will not yield control to the exploitation code, but rather enter a fail-safe *** this paper, we present principle of buffer overflow attacks, implementation details of AIFD, and experimental results of both penetration resistance and the performance impact of this solution.

关键词： buffer overflow attack AIFD API hook

来源：评论

学校读者我要写书评

暂无评论

HSP: A solution against heap sprays

引用

JOURNAL OF SYSTEMS AND SOFTWARE 2010年第11期83卷 2227-2236页

作者： Hsu, Fu-Hau Huang, Cheng-Hsien Hsu, Chi-Hsien Ou, Chih-Wen Chen, Li-Han Chiu, Ping-Cheng Natl Cent Univ Dept Comp Sci & Informat Engn Tao Yuan 32001 Taiwan

Heap sprays are a new buffer overflow attack (BOA) form that can significantly increase the successful chance of a BOA even though the attacked process is protected by a lot of state-of-the-art anti-BOA mechanisms, such as ASLR, non-executable stack/DEP, signature-based IDSes, and type-safe languages. In this paper, we propose a glibc-and-ASLR-based solution to heap sprays Heap Spray Protector (HSP). HSP controls the number and location of int 80 instructions in a process and hides the whereabouts of the only legal int 80 instruction;hence, HSP makes it difficult for attackers to issue a system call, let alone a heap spray attack. Moreover HSP can help ASLR defend against memory information leaking attacks. Furthermore, because HSP only modifies the glibc library and the kernel, it does not need to modify any source code or executable file. Finally, HSP allows attackers to execute as much code as possible before an attack can really create some damage;therefore, it enables the attacked hosts to collect more information about attackers which may be useful to block future attacks. Experimental results show HSP implemented on a Linux platform can effectively defend a system against heap sprays with less than 4.56% performance overhead. (C) 2010 Elsevier Inc. All rights reserved.

关键词： Heap spray buffer overflow attack System call ASLR

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：