SBIR Phase I: A Secure Virtual Machine Approach for Detecting Zero Day Memory Corruption Exploits

这个小型企业创新研究阶段（SBIR）I项目提出了一种新颖的安全虚拟机方法，用于检测和缓解广泛的内存损坏攻击。 如果成功，该方法将：（i）检测广泛的内存损坏攻击，（ii）轻量级和高效，（iii）检测零日漏洞利用和（iv）直接与二进制文件工作。如果成功开发，拟议的内存损坏保护技术有可能显着推进国家的最先进的保护企业和消费者免受零日蠕虫攻击，利用内存漏洞。它将能够保护易受攻击的关键业务应用程序，直到补丁可用，并为企业提供更大的时间窗口，以便在部署之前测试关键补丁。最终用户在浏览器中打开电子邮件附件或访问链接时将获得更安全的体验。 拟议的技术补充了现有的安全软件套件，如病毒扫描程序和个人防火墙，增加了一个新的层面的保护。

This Small Business Innovation Research Phase (SBIR) I project proposes a novel secure virtual machine approach to detect and mitigate a broad class of memory corruption attacks. If successful, the approach will: (i) detect a broad class of memory corruption attacks, (ii) be lightweight and efficient, (iii) detect zero-day exploits and (iv) work directly with binary files.If successfully developed, the proposed memory corruption protection technology has the potential to significantly advance the state-of-the-art in protecting businesses and consumers from zero-day worm attacks that exploit memory vulnerabilities. It will be able to protect vulnerable mission-critical business applications until a patch becomes available and also provide enterprises with a larger time window to test critical patches prior to deployment. End users will be afforded a safer experience when opening email attachments or accessing links in browsers. The proposed technology complements existing security software suites such as virus scanners and personal firewalls by adding a new dimension of protection.