用多密钥加密方法防御面向返回编程的攻击

发布时间：2018-03-09 21:13

本文选题：代码复用类攻击　切入点：返回编程(ROP)攻击　出处：《高技术通讯》2014年04期 　论文类型：期刊论文

【摘要】：针对面向返回编程(ROP)攻击的特性,提出了一种利用多密钥加密函数返回地址值防ROP攻击的方法。这种方法通过密钥指定位以及密钥迷惑位的巧妙设置,防止密钥在泄露情况下攻击者实施有效攻击的可能。利用二进制代码动态翻译工具PIN开发了原型系统,在实现时,为了避免攻击者攻击原型系统而直接访问密钥,引入了诱饵密钥,在增加攻击难度的同时降低了可信计算基。其有效性分析和实验结果表明,在不需要其他信息(如源码、调试信息等)条件下,多密钥加密防御方法能在适当的性能开销下,有效防御ROP攻击,并且其误报率极低。
[Abstract]:Aiming at the characteristic of return-oriented programming (ROP) attack, a method of preventing ROP attack by using multi-key encryption function to return address value is proposed. A prototype system is developed by using the binary code dynamic translation tool PIN. In order to avoid attackers attacking the prototype system, the key can be accessed directly in order to prevent the attacker from attacking the prototype system. The decoy key is introduced, which increases the difficulty of attack and reduces the trusted computing base. The effectiveness analysis and experimental results show that, without other information (such as source code, debugging information, etc.), Multi-key encryption defense method can effectively protect against ROP attacks with proper performance overhead, and its false alarm rate is very low.
【作者单位】：同济大学软件学院;
【基金】：863计划(2007AA01Z142)资助项目
【分类号】：TN918.4

【相似文献】