Using faults for buffer overflow effects
Using faults for buffer overflow effects
复制标题
使用故障来实现缓冲区溢出效果
DOI：
10.1145/2245276.2232038
复制
发表时间：
2012
期刊：
影响因子：
--
通讯作者：
F. Valette
中科院分区：
文献类型：
--
作者：
Pierre;Delphine Leresteux;F. Valette
在密码学界已经开发出故障攻击来提取硬件实现上的秘密信息。例如，它们还被用于绕过身份验证过程中的安全检查。在这里，我们展示了它们可以被利用来制造更多的破坏，例如缓冲区溢出攻击对机器的控制。在这篇简短的论文中，我们通过一个例子证明，对缓冲区溢出的对策也必须用于嵌入式处理器上运行的软件。
Fault attacks have been developed in the cryptographic community to extract secret information on hardware implementations. They have also been used to bypass security checks during authentication processes for example. Here, we show that they can be exploited to make more damage, taking the control of a machine as buffer overflow attacks do for instance. In this short paper, we demonstrate by using one example that countermeasures against buffer overflow must also be used for software running on embedded processors.