Securing systems against code-reuse attacks with modular pointer analysis

通过模块化指针分析保护系统免受代码重用攻击

• 批准号: DP180104069
• 负责人: Prof Jingling Xue
• 金额: $ 25.38万
• 依托单位: The University of New South Wales
• 依托单位国家: 澳大利亚
• 项目类别: Discovery Projects
• 财政年份: 2018
• 资助国家: 澳大利亚
• 起止时间: 2018-03-01 至 2022-07-31
• 项目状态: 已结题
• 来源: https://dataportal.arc.gov.au/RGS/Web/Grants/DP180104069
• 关键词: Securing; systems; against; code; reuse

This project aims to build secure defences against code-reuse attacks in large-scale C++ applications with millions of lines of code, by enforcing control flow integrity with modular pointer analysis. The state-of-the-art mitigation techniques that are deployed in mainstream computer operating systems can all be bypassed by advanced code-reuse attacks, resulting in security exploits in all major web browsers. The outcomes of this project will be an exploit mitigation technology and an open-source tool that can significantly raise the bar against advanced code-reuse attacks, thereby providing a foundation for eliminating such security threats.

该项目旨在通过使用模块化指针分析强制控制流完整性，在具有数百万行代码的大规模C++应用程序中构建针对代码重用攻击的安全防御。在主流计算机操作系统中部署的最先进的缓解技术都可以被高级代码重用攻击绕过，从而导致所有主要Web浏览器中的安全漏洞。该项目的成果将是一种漏洞利用缓解技术和一种开源工具，可以显著提高对高级代码重用攻击的门槛，从而为消除此类安全威胁奠定基础。