Building Secure Defenses Against Code-Reuse Attacks

This book provides an in-depth look at return-oriented programming attacks. It explores several conventional return-oriented programming attacks and analyzes the effectiveness of defense techniques including address space layout randomization (ASLR) and the control-flow restrictions implemented in security watchdogs such as Microsoft EMET.
Chapters also explain the principle of control-flow integrity (CFI), highlight the benefits of CFI and discuss its current weaknesses. Several improved and sophisticated return-oriented programming attack techniques such as just-in-time return-oriented programming are presented.
Building Secure Defenses against Code-Reuse Attacks is an excellent reference tool for researchers, programmers and professionals working in the security field. It provides advanced-level students studying computer science with a comprehensive overview and clear understanding of important runtime attacks.

Sommario

Introduction.- Background and Evolution of Code-Reuse Attacks.- Building Control-Flow Integrity Defenses.- Building Code Randomization Defenses.- Discussion and Conclusion.

Riassunto

This book provides an in-depth look at return-oriented programming attacks. It explores several conventional return-oriented programming attacks and analyzes the effectiveness of defense techniques including address space layout randomization (ASLR) and the control-flow restrictions implemented in security watchdogs such as Microsoft EMET.
Chapters also explain the principle of control-flow integrity (CFI), highlight the benefits of CFI and discuss its current weaknesses. Several improved and sophisticated return-oriented programming attack techniques such as just-in-time return-oriented programming are presented.
Building Secure Defenses against Code-Reuse Attacks is an excellent reference tool for researchers, programmers and professionals working in the security field. It provides advanced-level students studying computer science with a comprehensive overview and clear understanding of important runtime attacks.

Dettagli sul prodotto

• Autori: Lucas Davi, Ahmad-Reza Sadeghi
• Editore: Springer, Berlin
• Lingue: Inglese
• Formato: Tascabile
• Pubblicazione: 16.12.2015
• EAN: 9783319255446
• ISBN: 978-3-31-925544-6
• Pagine: 74
• Dimensioni: 155 mm x 6 mm x 236 mm
• Peso: 143 g
• Illustrazioni: X, 74 p. 16 illus., 8 illus. in color.
• Serie: SpringerBriefs in Computer Science
• Categorie: Scienze naturali, medicina, informatica, tecnica > Informatica, EDP > Informatica; C, computer science, Systems and Data Security, Data and Information Security, Computer Communication Networks, Programming Techniques, Programming Languages, Compilers, Interpreters, Information Systems and Communication Service, Computer programming, Computers, Network Security, Computer security, Computer programming / software engineering, Programming & scripting languages: general, Compilers & interpreters, Programming languages (Electronic computers), Computer networking & communications, Compilers and Interpreters