Dynamic reencryption of return addresses
DC Field | Value | Language |
---|---|---|
dc.contributor.author | Lee, Hyungyu | - |
dc.contributor.author | Pyo, Changwoo | - |
dc.contributor.author | Lee, Gyungho | - |
dc.date.available | 2020-07-10T04:02:34Z | - |
dc.date.created | 2020-07-06 | - |
dc.date.issued | 2019-01 | - |
dc.identifier.issn | 1751-8709 | - |
dc.identifier.uri | https://scholarworks.bwise.kr/hongik/handle/2020.sw.hongik/2079 | - |
dc.description.abstract | The authors present dynamic reencryption of return addresses to mitigate their leakage. The authors' method enforces programs to save return addresses as encrypted and renew the encryption states with fresh keys before or after vulnerable operations. When a function returns, it should restore the return address from its encryption using the most recent key not to cause a crash. Under the protection of their method, return addresses and keys may leak, but the disclosed bits become garbage because keys govern all return addresses through encryption, while changing before control-flow proceeds into a vulnerable region. As a result, it becomes probabilistically infeasible to build exploits for intercepting control-flow by using leaked return addresses or keys. They implemented the proposed method as an extension of the LLVM compiler that inserts reencryption code where necessary. They also have confirmed its effectiveness against information leak attacks carried out in the early stage of blind return-oriented programming (BROP). The performance overhead ranges below 11.6% for processor-intensive programs and 4.12% or less for web servers. | - |
dc.language | 영어 | - |
dc.language.iso | en | - |
dc.publisher | INST ENGINEERING TECHNOLOGY-IET | - |
dc.subject | RANDOMIZATION | - |
dc.title | Dynamic reencryption of return addresses | - |
dc.type | Article | - |
dc.contributor.affiliatedAuthor | Pyo, Changwoo | - |
dc.identifier.doi | 10.1049/iet-ifs.2018.5142 | - |
dc.identifier.scopusid | 2-s2.0-85059937961 | - |
dc.identifier.wosid | 000455639700010 | - |
dc.identifier.bibliographicCitation | IET INFORMATION SECURITY, v.13, no.1, pp.76 - 85 | - |
dc.relation.isPartOf | IET INFORMATION SECURITY | - |
dc.citation.title | IET INFORMATION SECURITY | - |
dc.citation.volume | 13 | - |
dc.citation.number | 1 | - |
dc.citation.startPage | 76 | - |
dc.citation.endPage | 85 | - |
dc.type.rims | ART | - |
dc.type.docType | Article | - |
dc.description.journalClass | 1 | - |
dc.description.journalRegisteredClass | scie | - |
dc.description.journalRegisteredClass | scopus | - |
dc.relation.journalResearchArea | Computer Science | - |
dc.relation.journalWebOfScienceCategory | Computer Science, Information Systems | - |
dc.relation.journalWebOfScienceCategory | Computer Science, Theory & Methods | - |
dc.subject.keywordPlus | RANDOMIZATION | - |
dc.subject.keywordAuthor | cryptography | - |
dc.subject.keywordAuthor | dynamic reencryption | - |
dc.subject.keywordAuthor | return address | - |
dc.subject.keywordAuthor | function returns | - |
dc.subject.keywordAuthor | leaked return addresses | - |
Items in ScholarWorks are protected by copyright, with all rights reserved, unless otherwise indicated.
94, Wausan-ro, Mapo-gu, Seoul, 04066, Korea02-320-1314
COPYRIGHT 2020 HONGIK UNIVERSITY. ALL RIGHTS RESERVED.
Certain data included herein are derived from the © Web of Science of Clarivate Analytics. All rights reserved.
You may not copy or re-distribute this material in whole or in part without the prior written consent of Clarivate Analytics.