一句话:提出 Hurdle,通过加固跳转指令来防御代码重用攻击,弥补不精确 CFI 的不足。
代码重用攻击是当前利用内存安全漏洞的先进攻击方式。控制流完整性(CFI)技术被视为防止此类攻击的重要方向,但现有攻击能够规避不精确以及基于启发式的检测与防御机制。该论文提出 Hurdle,关注跳转指令的安全性,试图通过对跳转指令的保护来增强对代码重用攻击的防御能力。标题表明其核心是围绕 jump instructions 构建防护机制。摘要主要阐述了问题背景与研究动机,未给出具体的方法细节、实现方式或实验评估结果,因此其有效性、性能开销和适用范围仍需参考论文全文。
Code-reuse attacks represent the state-of-the-art in exploiting memory safety vulnerabilities. Control-flow integrity techniques offer a promising direction for preventing code-reuse attacks, but these attacks are resilient against imprecise and heuristic-based detection and prevention mechanisms.
@inproceedings{paperbot5457,
title = {Hurdle: Securing Jump Instructions Against Code Reuse Attacks},
author = {Christian DeLozier and Kavya Lakshminarayanan and Gilles Pokam and Joseph Devietti},
booktitle = {ASPLOS},
year = {2020},
doi = {10.1145/3373376.3378506}
}