On the Effectiveness of Control-Flow Integrity Against Modern Attack Techniques - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2019

On the Effectiveness of Control-Flow Integrity Against Modern Attack Techniques

Sarwar Sayeed
  • Fonction : Auteur
  • PersonId : 1153481
Hector Marco-Gisbert
  • Fonction : Auteur
  • PersonId : 1153482

Résumé

Memory error vulnerabilities are still widely exploited by attackers despite the various protections developed. Attackers have adopted new strategies to successfully exploit well-known memory errors bypassing mature protection techniques such us the NX, SSP, and ASLR. Those attacks compromise the execution flow to gain control over the target successfully.Control-flow Integrity (CFI) is a protection technique that aims to eradicate memory error exploitation by ensuring that the instruction pointer (IP) of a running program cannot be controlled by a malicious attacker. In this paper, we assess the effectiveness of 14 CFI techniques against the most popular exploitation techniques including code reuse attacks, return-to-user, return-to-libc and replay attacks.Surveys are conducted to classify those 14 CFI techniques based on the security robustness and implementation feasibility. Our study indicates that the majority of the CFI techniques are primarily focused on restricting indirect branch instructions and cannot prevent all forms of vulnerability exploitation. Moreover, we show that the overhead and implementation requirement make some CFI techniques impractical. We conclude that the effort required to have those techniques in real systems, the high overhead, and also the partial attack coverage is discouraging the industry from adopting CFI protections.
Fichier principal
Vignette du fichier
485650_1_En_23_Chapter.pdf (324.03 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-03744303 , version 1 (02-08-2022)

Licence

Paternité

Identifiants

Citer

Sarwar Sayeed, Hector Marco-Gisbert. On the Effectiveness of Control-Flow Integrity Against Modern Attack Techniques. 34th IFIP International Conference on ICT Systems Security and Privacy Protection (SEC), Jun 2019, Lisbon, Portugal. pp.331-344, ⟨10.1007/978-3-030-22312-0_23⟩. ⟨hal-03744303⟩
12 Consultations
85 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More