Novel Techniques In Recovering Embedding And Enforcing Policies For Control Flow Integrity

Author : Yan Lin
Publisher :
ISBN 13 : 9783030731427
Total Pages : 0 pages
Book Rating : 4.21/5 ( download)

DOWNLOAD NOW!

Download or read book Novel Techniques in Recovering, Embedding, and Enforcing Policies for Control-Flow Integrity written by Yan Lin and published by . This book was released on 2021 with total page 0 pages. Available in PDF, EPUB and Kindle. Book excerpt: Control-Flow Integrity (CFI) is an attractive security property with which most injected and code-reuse attacks can be defeated, including advanced attacking techniques like return-oriented programming. CFI extracts a control-flow graph (CFG) for a given program, with checks inserted before indirect branch instructions. Before executed during runtime, the checks consult the CFG to ensure that the indirect branch is allowed to reach the intended target. Hence, any sort of control-flow hijacking can be prevented. This concise volume proposes novel solutions to handle the fundamental components of CFI enforcement: accurately recovering the policy (CFG); embedding the CFI policy securely; and efficiently enforcing the CFI policy. Addressing the first component, the book systematically studies two methods that recover CFI policy based on function signature matching at the binary level, then offers a unique rule- and heuristic-based mechanism to more accurately recover function signature. To embed CFI policy securely, the book advocates a new platform that encodes the policy into the machine instructions directly without relying on consulting any read-only data structure. Finally, the work prescribes a mature dynamic-code-optimization platform called DynamoRIO to enforce the policy when needed. Key features: Provides deep understanding of Control-Flow Integrity Offers new insights on the relationship between function signature and compiler optimization Demonstrates how CFI can be more efficient than Data Execution Prevention This focused, distinctive volume will appeal to researchers, scientists, lecturers, as well as postgraduates with a background in binary analysis. Libraries, practitioners, and professionals will also benefit, depending on their missions and programs. Yan Lin is at the School of Computing and Information Systems, Singapore Management University. Her extensive foundational studies have focused on the area of cybersecurity, and her current research focuses on software security and system security. .

Author : Yan Lin
Publisher : Springer Nature
ISBN 13 : 3030731413
Total Pages : 106 pages
Book Rating : 4.10/5 ( download)

DOWNLOAD NOW!

Download or read book Novel Techniques in Recovering, Embedding, and Enforcing Policies for Control-Flow Integrity written by Yan Lin and published by Springer Nature. This book was released on 2021-04-30 with total page 106 pages. Available in PDF, EPUB and Kindle. Book excerpt: There are three fundamental components in Control-Flow Integrity (CFI) enforcement. The first component is accurately recovering the policy (CFG). Usually, the more precise the policy is, the more security CFI improves, but precise CFG generation was considered hard without the support of source code. The second component is embedding the CFI policy securely. Current CFI enforcement usually inserts checks before indirect branches to consult a read-only table which stores the valid CFG information. However, this kind of read-only table can be overwritten by some kinds of attacks (e.g., the Rowhammer attack and data-oriented programming). The third component is to efficiently enforce the CFI policy. In current approaches CFI checks are always executed whenever there is an indirect control flow transfer. Therefore, it is critical to minimize the performance impact of CFI checks. In this book, we propose novel solutions to handle these three fundamental components. To generate a precise CFI policy without the support of the source code, we systematically study two methods which recover CFI policy based on function signature matching at the binary level and propose our novel rule- and heuristic-based mechanism to more accurately recover function signature. To embed CFI policy securely, we design a novel platform which encodes the policy into the machine instructions directly without relying on consulting any read-only data structure, by making use of the idea of instruction-set randomization. Each basic block is encrypted with a key derived from the CFG. To efficiently enforce CFI policy, we make use of a mature dynamic code optimization platform called DynamoRIO to enforce the policy so that we are only required to do the CFI check when needed.

Author : Frank J. Furrer
Publisher : Springer Nature
ISBN 13 : 365837182X
Total Pages : 559 pages
Book Rating : 4.21/5 ( download)

DOWNLOAD NOW!

Download or read book Safety and Security of Cyber-Physical Systems written by Frank J. Furrer and published by Springer Nature. This book was released on 2022-07-20 with total page 559 pages. Available in PDF, EPUB and Kindle. Book excerpt: Cyber-physical systems (CPSs) consist of software-controlled computing devices communicating with each other and interacting with the physical world through sensors and actuators. Because most of the functionality of a CPS is implemented in software, the software is of crucial importance for the safety and security of the CPS. This book presents principle-based engineering for the development and operation of dependable software. The knowledge in this book addresses organizations that want to strengthen their methodologies to build safe and secure software for mission-critical cyber-physical systems. The book: • Presents a successful strategy for the management of vulnerabilities, threats, and failures in mission-critical cyber-physical systems; • Offers deep practical insight into principle-based software development (62 principles are introduced and cataloged into five categories: Business & organization, general principles, safety, security, and risk management principles); • Provides direct guidance on architecting and operating dependable cyber-physical systems for software managers and architects.

Author : Long Wang
Publisher : Springer Nature
ISBN 13 : 3031020634
Total Pages : 429 pages
Book Rating : 4.36/5 ( download)

DOWNLOAD NOW!

Download or read book System Dependability and Analytics written by Long Wang and published by Springer Nature. This book was released on 2022-07-25 with total page 429 pages. Available in PDF, EPUB and Kindle. Book excerpt: This book comprises chapters authored by experts who are professors and researchers in internationally recognized universities and research institutions. The book presents the results of research and descriptions of real-world systems, services, and technologies. Reading this book, researchers, professional practitioners, and graduate students will gain a clear vision on the state of the art of the research and real-world practice on system dependability and analytics. The book is published in honor of Professor Ravishankar K. Iyer, the George and Ann Fisher Distinguished Professor in the Department of Electrical and Computer Engineering at the University of Illinois at Urbana-Champaign (UIUC), Urbana, Illinois. Professor Iyer is ACM Fellow, IEEE Fellow, AAAS Fellow, and served as Interim Vice Chancellor of UIUC for research during 2008–2011. The book contains chapters written by many of his former students.

Author :
Publisher :
ISBN 13 :
Total Pages : 868 pages
Book Rating : 4.57/5 ( download)

DOWNLOAD NOW!

Download or read book Dissertation Abstracts International written by and published by . This book was released on 2008 with total page 868 pages. Available in PDF, EPUB and Kindle. Book excerpt:

Author : Casimer DeCusatis
Publisher : Elsevier Inc. Chapters
ISBN 13 : 0128068132
Total Pages : 468 pages
Book Rating : 4.37/5 ( download)

DOWNLOAD NOW!

Download or read book Handbook of Fiber Optic Data Communication written by Casimer DeCusatis and published by Elsevier Inc. Chapters. This book was released on 2013-08-09 with total page 468 pages. Available in PDF, EPUB and Kindle. Book excerpt: In recent years, there have been many fundamental changes in the architecture of modern data centers. New applications have emerged, including cloud computing, big data analytics, real-time stock trading, and more. Workloads have evolved from a predominantly static environment into one that changes over time in response to user demands, often as part of a highly virtualized, multitenant data center. In response to these new requirements, data center networks have also undergone significant change. Conventional network architectures, which use Ethernet access, aggregation, and core tiers with a separate storage area network, are not well suited to modern data center traffic patterns. This chapter reviews the evolution from conventional network architectures into designs better suited to dynamic, distributed workloads. This includes flattening the network, converging Ethernet with storage and other protocols, and virtualizing and scaling the network. Effects of oversubscription, latency, higher data rates, availability, reliability, energy efficiency, and network security will be discussed.

Author : Lucas Davi
Publisher : Springer
ISBN 13 : 3319255460
Total Pages : 74 pages
Book Rating : 4.60/5 ( download)

DOWNLOAD NOW!

Download or read book Building Secure Defenses Against Code-Reuse Attacks written by Lucas Davi and published by Springer. This book was released on 2015-12-07 with total page 74 pages. Available in PDF, EPUB and Kindle. Book excerpt: This book provides an in-depth look at return-oriented programming attacks. It explores several conventional return-oriented programming attacks and analyzes the effectiveness of defense techniques including address space layout randomization (ASLR) and the control-flow restrictions implemented in security watchdogs such as Microsoft EMET. Chapters also explain the principle of control-flow integrity (CFI), highlight the benefits of CFI and discuss its current weaknesses. Several improved and sophisticated return-oriented programming attack techniques such as just-in-time return-oriented programming are presented. Building Secure Defenses against Code-Reuse Attacks is an excellent reference tool for researchers, programmers and professionals working in the security field. It provides advanced-level students studying computer science with a comprehensive overview and clear understanding of important runtime attacks.

Author : Xiaoyu Ruan
Publisher : Apress
ISBN 13 : 1430265728
Total Pages : 263 pages
Book Rating : 4.26/5 ( download)

DOWNLOAD NOW!

Download or read book Platform Embedded Security Technology Revealed written by Xiaoyu Ruan and published by Apress. This book was released on 2014-08-28 with total page 263 pages. Available in PDF, EPUB and Kindle. Book excerpt: Platform Embedded Security Technology Revealed is an in-depth introduction to Intel’s platform embedded solution: the security and management engine. The engine is shipped inside most Intel platforms for servers, personal computers, tablets, and smartphones. The engine realizes advanced security and management functionalities and protects applications’ secrets and users’ privacy in a secure, light-weight, and inexpensive way. Besides native built-in features, it allows third-party software vendors to develop applications that take advantage of the security infrastructures offered by the engine. Intel’s security and management engine is technologically unique and significant, but is largely unknown to many members of the tech communities who could potentially benefit from it. Platform Embedded Security Technology Revealed reveals technical details of the engine. The engine provides a new way for the computer security industry to resolve critical problems resulting from booming mobile technologies, such as increasing threats against confidentiality and privacy. This book describes how this advanced level of protection is made possible by the engine, how it can improve users’ security experience, and how third-party vendors can make use of it. It's written for computer security professionals and researchers; embedded system engineers; and software engineers and vendors who are interested in developing new security applications on top of Intel’s security and management engine. It’s also written for advanced users who are interested in understanding how the security features of Intel’s platforms work.

Author : National Research Council
Publisher : National Academies Press
ISBN 13 : 0309142393
Total Pages : 348 pages
Book Rating : 4.97/5 ( download)

DOWNLOAD NOW!

Download or read book Strengthening Forensic Science in the United States written by National Research Council and published by National Academies Press. This book was released on 2009-07-29 with total page 348 pages. Available in PDF, EPUB and Kindle. Book excerpt: Scores of talented and dedicated people serve the forensic science community, performing vitally important work. However, they are often constrained by lack of adequate resources, sound policies, and national support. It is clear that change and advancements, both systematic and scientific, are needed in a number of forensic science disciplines to ensure the reliability of work, establish enforceable standards, and promote best practices with consistent application. Strengthening Forensic Science in the United States: A Path Forward provides a detailed plan for addressing these needs and suggests the creation of a new government entity, the National Institute of Forensic Science, to establish and enforce standards within the forensic science community. The benefits of improving and regulating the forensic science disciplines are clear: assisting law enforcement officials, enhancing homeland security, and reducing the risk of wrongful conviction and exoneration. Strengthening Forensic Science in the United States gives a full account of what is needed to advance the forensic science disciplines, including upgrading of systems and organizational structures, better training, widespread adoption of uniform and enforceable best practices, and mandatory certification and accreditation programs. While this book provides an essential call-to-action for congress and policy makers, it also serves as a vital tool for law enforcement agencies, criminal prosecutors and attorneys, and forensic science educators.

Author : El Bachir Boukherouaa
Publisher : International Monetary Fund
ISBN 13 : 1589063953
Total Pages : 35 pages
Book Rating : 4.52/5 ( download)

DOWNLOAD NOW!

Download or read book Powering the Digital Economy: Opportunities and Risks of Artificial Intelligence in Finance written by El Bachir Boukherouaa and published by International Monetary Fund. This book was released on 2021-10-22 with total page 35 pages. Available in PDF, EPUB and Kindle. Book excerpt: This paper discusses the impact of the rapid adoption of artificial intelligence (AI) and machine learning (ML) in the financial sector. It highlights the benefits these technologies bring in terms of financial deepening and efficiency, while raising concerns about its potential in widening the digital divide between advanced and developing economies. The paper advances the discussion on the impact of this technology by distilling and categorizing the unique risks that it could pose to the integrity and stability of the financial system, policy challenges, and potential regulatory approaches. The evolving nature of this technology and its application in finance means that the full extent of its strengths and weaknesses is yet to be fully understood. Given the risk of unexpected pitfalls, countries will need to strengthen prudential oversight.