CORC  > 北京大学  > 信息科学技术学院
FPValidator: Validating Type Equivalence of Function Pointers On The Fly
Wang, Hua ; Guo, Yao ; Chen, Xiangqun
2009
关键词CODE
英文摘要Validating function pointers dynamically is very useful for intrusion detection since many runtime attacks exploit function pointer vulnerabilities. Most current solutions tackle this problem through checking whether function pointers target the addresses within the code segment or, more strictly, valid function entries. However, they cannot detect function entry attacks that manipulate function pointers to target valid function entries but invoke them maliciously. This paper proposes FPValidator, a new solution capable of dynamically validating the type equivalence between function pointers and target functions, which can detect all function entry attacks that violate type equivalence. An effective and efficient type matching approach based on labeled type signature is proposed to perform fast type equivalence checking. The validation code and necessary type information are inserted by a compilation-stage instrumentation mechanism, bringing no extra burden to developers. We integrate FPValidator into GCC and evaluation shows that its performance overhead is only about 2%.; http://gateway.webofknowledge.com/gateway/Gateway.cgi?GWVersion=2&SrcApp=PARTNER_APP&SrcAuth=LinksAMR&KeyUT=WOS:000291011300006&DestLinkType=FullRecord&DestApp=ALL_WOS&UsrCustomerID=8e1609b174ce4e31116a60747a720701 ; Computer Science, Theory & Methods; Engineering, Electrical & Electronic; CPCI-S(ISTP); 0
语种英语
DOI标识10.1109/ACSAC.2009.15
内容类型其他
源URL[http://ir.pku.edu.cn/handle/20.500.11897/406354]  
专题信息科学技术学院
推荐引用方式
GB/T 7714
Wang, Hua,Guo, Yao,Chen, Xiangqun. FPValidator: Validating Type Equivalence of Function Pointers On The Fly. 2009-01-01.
个性服务
查看访问统计
相关权益政策
暂无数据
收藏/分享
所有评论 (0)
暂无评论
 

除非特别说明,本系统中所有内容都受版权保护,并保留所有权利。


©版权所有 ©2017 CSpace - Powered by CSpace