一句话:提出 ViK,通过对象 ID 检查实用地缓解 use-after-free 等时序内存安全违规。
论文关注 C/C++ 等内存不安全语言中的时序内存安全违规,尤其是 use-after-free(UAF)漏洞,这类问题严重威胁软件安全。标题表明作者提出 ViK,一种通过对象 ID(object ID)检查来实用地缓解时序内存安全违规的方法。其核心思路应是在运行时识别并检查对象标识,以判断访问是否仍指向合法对象,从而阻止悬垂指针或释放后使用等非法访问。由于给出的摘要只描述了问题背景,未说明具体实现机制、性能开销或实验评估,因此摘要层面只能确认该工作以实用化缓解时序内存安全违规为目标。
Temporal memory safety violations, such as use-after-free (UAF) vulnerabilities, are a critical security issue for software written in memory-unsafe languages such as C and C++.
@inproceedings{ChoPOB0SDA22,
title = {ViK: practical mitigation of temporal memory safety violations through object ID inspection},
author = {Haehyun Cho and Jinbum Park and Adam Oest and Tiffany Bao and Ruoyu Wang and Yan Shoshitaishvili and Adam Doupé and Gail-Joon Ahn},
booktitle = {ASPLOS},
year = {2022},
doi = {10.1145/3503222.3507780}
}