Скачать или смотреть Exploit mitigation at the native level for RISC-based devices (by Matthias Neugschwandtner)

Talk on "Exploit mitigation at the native level for RISC-based devices" by Matthias Neugschwandtner at the Android Security Symposium in Vienna, Austria, 9-11 September 2015
https://usmile.at/symposium/program/2...

** Abstract **
We present a novel approach for exploit mitigation that is specifically tailored towards embedded systems that are based on the common RISC architecture. We leverage architectural features of RISC CPUs to extract a combination of static and dynamic properties relevant to OS service requests from executables, and enforce them during runtime. Our technique borrows ideas from several areas including control flow integrity, system call monitoring, static analysis, and code emulation, and combines them in a low-overhead fashion directly in the operating system kernel. We implemented our approach for the Linux operating system. Our system is very practical, and restricts the ability of attackers to exploit generic memory corruption vulnerabilities in COTS binaries. In contrast to other approaches, we do not require access to source code, binary modification, or application specific configuration such as policies. Our evaluation demonstrates that our approach incurs a very low overhead - only 2% - and shows that our approach is practical against both code injection and code reuse attacks.

** Android Security Symposium **
The Android Security Symposium was funded by the Christian Doppler Forschungsgesellschaft (CDG) from funds of the Federal Ministry of Science, Research and Economy (BMWFW) and the Nationalstiftung für Forschung, Technologie und Entwicklung. The symposium was organized by the Josef Ressel Center u'smile at the University of Applied Sciences Upper Austria in Hagenberg in cooperation with SBA Research and the Institute of Networks and Security (INS) at Johannes Kepler University Linz.

This video is provided by the Josef Ressel Center for User-friedly Secure Mobile Environments (u'smile), a research group at the University of Applied Sciences Upper Austria.

Copyright (c) FH OÖ Forschungs & Entwicklungs GmbH • All rights reserved. • https://usmile.at/impressum