Global ETD Search
Search theses and dissertations gathered from participating repositories worldwide. Every result links back to the library that holds it. No account is needed.
Results
Showing 1 to 20 of 43 for “"Code-Reuse"”.
-
Taxi : defeating code reuse attacks with tagged memory
The rise of code reuse attacks has been devastating for users of languages like C and C++ that lack memory safety. We survey existing defenses to understand why none are generally applicable, focusing our attention on the Code Pointer Integrity (CPI) defense. We show that while CPI is hard to …
-
Defeating code reuse attacks with minimal tagged architecture
… thesis, we argue that software-based defenses to code reuse attacks are fundamentally flawed. With code pointer integrity as a case study, we show that a secure and efficient software-based defense to code reuse attacks is impossible and thus motivate the case for hardware approaches. We then …
-
Binary Program Integrity Models for Defeating Code-Reuse Attacks
… hijacks control-flow, and executes malicious code. Data Execution Prevention (DEP), a hardware-enforced security feature, prevents an attacker from directly executing the injected malicious code. Therefore, attackers have resorted to code-reuse attacks, wherein carefully chosen fragments of …
-
A systematic analysis of defenses against code reuse attacks
… thesis, we developed a systematic model of the code reuse attack space where facts about attacks and defenses were represented as propositional statements in boolean logic and the possibility of deploying malware was a satisfiability instance. We use the model to analyze the space in two ways: …
-
Improved source code editing for effective ad-hoc code reuse
Code reuse is essential for productivity and software quality. Code reuse based on abstraction mechanisms in programming languages is a standard approach, but programmers also reuse code by taking an ad-hoc approach, in which text of code is reused without abstraction. This thesis focuses on …
-
Analysis of defenses against code reuse attacks on modern and new architectures
… the instruction pointer. In order to gain remote code execution, attackers then exploit legitimate fragments of code in the executable via techniques such as return-oriented-programming or virtual table overwrites. This project aims to answer fundamental questions about the efficacy of …
-
A lightweight, graph-theoretic model of class-based similarity to support object-oriented code reuse.
… similarity in collections of object-oriented code. Attention is focused on enhancing the potential for software reuse in situations where a reuse process is either absent or informal, and the characteristics of the organisation are unsuitable, or resources unavailable, to promote and sustain a …
-
Analysis of return oriented programming and countermeasures
… by using an exploitation method known as "code reuse." This class of exploitation techniques makes use of the lack of memory safety in C which allows an attacker to redirect a program's control flow to pre-existing snippets of code. Code reuse attacks have historically been a powerful and …
-
Trace-based hardware control flow signature checking
… control-flow integrity (CFI), offers immunity to code-reuse attacks but slows down software that enforces CFI. In this work, we present a hardware monitor design that utilizes hardware support for instruction tracing to detect code-reuse attacks. The monitor is small in hardware size, uses low …
-
P-TAXI : enforcing memory safety with programmable tagged architecture
… to software security. With the advancement of code-reuse attacks and return-oriented programming (ROP), it becomes problematic to protect a program from being compromised. Several defenses have been developed in an attempt to defeat code-reuse attacks. However, there is still no solution that …
-
Reconfigurable SCA System Development Using Encapsulated Waveform Applications and Components
… defined radios (SDR) designed in part to promote code reuse for long-term development. With the emergence of adaptive/cognitive radios, new SDRs that are capable of reconfiguration during runtime must be developed. One advantage of SDR development over conventional radio development can be ease of …
-
Language Evolution for Parallel and Scientific Computing
… of the past. These abstractions should enable code reuse for different forms of compute architectures, to allow users to keep up with the fluid landscape of accelerators. These abstractions should enable code reuse for different mathematical objects such as dense, sparse and structured …
-
rave: A Framework for Code and Memory Randomization of Linux Containers
… as it has for decades. With the emergence of code-reuse attacks which take advantage of these vulnerabilities like Return- Oriented Programming (ROP) or non-control data attacks like Data-Oriented programming (DOP), defenses against these are growing thin. These attacks, and more advanced …
-
Improving Reuse in Software Development for the Life Sciences
… in software development is largely due to code reuse generally not being applied in practice.</p> <p>This dissertation presents Legwork, a class library of reuse-optimized design pattern implementations for desktop applications written in the C# programming language using Microsoft's .NET …
-
Helping Developers Migrate their Code across Programming Languages
Migrating source code from one programming language to another is a common task in software development. This migration can be done by completely rewriting the code in the target language, or it can be facilitated through code-reuse or automation techniques. This thesis explores both approaches. …
-
Compiler and Machine Learning-based Predictive Techniques for Security Enhancement through Software Debloating
Code reuse attacks continue to be a serious threat to software. Attackers today are able to piece together short sequences of instructions in otherwise benign code to carry out malicious actions. Eliminating these reusable code snippets, known as gadgets, has become one of the prime focuses of …
-
Texas Instruments DSP Dynamic Run-Time Loader
… of the static model while improving code reuse, portability and multitasking ability, to help meet the demands of tomorrows DSP applications.
-
Secure platforms for enforcing contextual access control
… be secured against various attacks such as code reuse attacks. To mitigate these attacks, we propose a binary diversification approach that randomizes the target executable with every run. We also propose a defense framework based on control flow analysis that detects, diagnoses and responds …
-
Quantitative Metrics and Measurement Methodologies for System Security Assurance
… Address Space Layout Randomization (ASLR) on code reuse attacks under the Just-In-Time Return-Oriented Programming (JITROP) threat model. We conduct a comprehensive measurement study with five fine-grained ASLR tools, 20 applications including six browsers, one browser engine, and 25 dynamic …
-
Next generation satellite orbital control system
… face corporations today, including maximizing code reuse, mitigation of project risks and the alignment of the solution with business objectives.
Page 1 of 3