prevent kernel return-oriented programming attacks using hardware virtualization
文献类型：会议论文
| 作者 | Tian Shuo ; He Yeping ; Ding Baozeng |
| 出版日期 | 2012 |
| 会议名称 | 8th International Conference on Information Security Practice and Experience, ISPEC 2012 |
| 会议日期 | April 9, 2012 - April 12, 2012 |
| 会议地点 | Hangzhou, China |
| 关键词 | Security of data Security systems |
| 页码 | 289-300 |
| 中文摘要 | ROP attack introduced briefly in this paper is a serious threat to compute systems. Kernel ROP attack is great challenge to existing defenses because attackers have system privilege, little prerequisite to mount attacks, and the disability of existing countermeasures against runtime attacks. A method preventing kernel return-oriented programming attack is proposed, which creates a separated secret address space for control data taking advantage of VMM architecture. The secret address space is implemented as a shadow stack on the same host with the target OS facilited by hardware virtualization techniques. The experience result shows the performance overhead in our implementation is about 10% and acceptable in practical. © 2012 Springer-Verlag. |
| 英文摘要 | ROP attack introduced briefly in this paper is a serious threat to compute systems. Kernel ROP attack is great challenge to existing defenses because attackers have system privilege, little prerequisite to mount attacks, and the disability of existing countermeasures against runtime attacks. A method preventing kernel return-oriented programming attack is proposed, which creates a separated secret address space for control data taking advantage of VMM architecture. The secret address space is implemented as a shadow stack on the same host with the target OS facilited by hardware virtualization techniques. The experience result shows the performance overhead in our implementation is about 10% and acceptable in practical. © 2012 Springer-Verlag. |
| 收录类别 | EI |
| 会议录 | Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
 |
| 语种 | 英语 |
| ISSN号 | 0302-9743 |
| ISBN号 | 9783642291005 |
| 源URL | [http://ir.iscas.ac.cn/handle/311060/15730]  |
| 专题 | 软件研究所_软件所图书馆_会议论文 |
| 推荐引用方式 GB/T 7714 | Tian Shuo,He Yeping,Ding Baozeng. prevent kernel return-oriented programming attacks using hardware virtualization[C]. 见:8th International Conference on Information Security Practice and Experience, ISPEC 2012. Hangzhou, China. April 9, 2012 - April 12, 2012. |
入库方式： OAI收割
来源：软件研究所
浏览0
下载0
收藏0
其他版本
除非特别说明，本系统中所有内容都受版权保护，并保留所有权利。