Global ETD Search
Search theses and dissertations gathered from participating repositories worldwide. Every result links back to the library that holds it. No account is needed.
Results
Showing 1 to 8 of 8 for “"Control flow integrity (CFI)"”.
-
Trace-based hardware control flow signature checking
… a performance penalty. One such advancement, control-flow integrity (CFI), offers immunity to code-reuse attacks but slows down software that enforces CFI. In this work, we present a hardware monitor design that utilizes hardware support for instruction tracing to detect code-reuse attacks. …
-
Continuous monitoring methods to achieve resiliency for virtual machines
… the hypervisor, we introduce hShield, a Control-Flow Integrity (CFI) enforcement method to detect VM-escape at- tacks. HyperTap, Hprobes, and hShield create a complete chain-of-trust for the entire virtualization software stack.
-
A systematic analysis of defenses against code reuse attacks
… defense bypasses. Next, we investigate the control flow graphs enforced by proposed control flow integrity (CFI) systems. We model the behavior of these systems using a graph search. We also develop several code reuse payloads that work within the control flow graph enforced by one proposed …
-
Defending Real-Time Systems through Timing-Aware Designs
… from cars to airplanes, pacemakers to industrial-control systems, and other pieces of critical infrastructure. With the increasing interconnectivity of these systems, system security issues and the constant threat of manipulation by malicious external attackers that have plagued general computing …
-
Analysis of defenses against code reuse attacks on modern and new architectures
… avenue for exploitation of computer systems is a control-flow attack in which the attacker gains direct or indirect control of the instruction pointer. In order to gain remote code execution, attackers then exploit legitimate fragments of code in the executable via techniques such as …
-
HyperSpace: Data-Value Integrity for Securing Software
… Current state-of-the-art policies, such as Data-Flow Integrity (DFI) and Control-Flow Integrity (CFI), are effective but often struggle to balance precision, generality, and runtime overhead. In this thesis, we propose Data-Value Integrity (DVI), a new defense policy that enforces the integrity …
-
Evaluating modern defenses against control flow hijacking
… and practical defenses such as Code Pointer Integrity (CPI) and Control Flow Integrity (CFI) have their weaknesses. In this thesis, we present attacks that expose the fundamental weaknesses of CPI and CFI. CPI promises to balance security and performance by focusing memory safety on code …
-
Record and replay based virtual-machine introspection for system security
… a ROP detector. Rare false positives due to underflows are eliminated via replay instead of hardware over-design. RnR-ROPSafe relies on two on-the-fly replayers: an always-on, fast Checkpointing replayer that periodically creates checkpoints, and a detailed-analysis Alarm replayer that is …