ROPRD: A Solution to Detect Real-time Zero-day ROP Attacks

Please use this identifier to cite or link to this item: http://ir.lib.ncu.edu.tw/handle/987654321/81283

Title:	ROPRD: A Solution to Detect Real-time Zero-day ROP Attacks
Authors:	侯均靜;Hou, Chun-Ching
Contributors:	資訊工程學系
Keywords:	緩衝區溢位;返回導向程式設計;Buffer Overflow;ROP
Date:	2019-08-16
Issue Date:	2019-09-03 15:42:36 (UTC+8)
Publisher:	國立中央大學
Abstract:	返回導向程式設計（Return-Oriented Programming）是一種非常常見的緩衝區溢位攻擊，攻擊者可以蒐集程式的機器語言指令（Gadget），藉由這些指令序列來覆蓋掉堆疊上的返回地址，以達成控制程式執行流程的目的。本論文設計了一套解決方案，名為 ROPRD ，透過修改 Linux Kernel 及 Binary Rewrite，在盡量不影響系統架構及效能的狀況下，來達成 ROP 攻擊的即時偵測。;Return-Oriented Programming (ROP) is a common Buffer-Overflow Attack. The attacker can collect some machine code in the program, which called ′Gadget′, combine those gadgets, and change the return address on the stack. This will cause the program execution process to be controlled by the attacker. We design a solution called ROPRD. We can detect ROP attacks in real-time without affecting the system architecture and performance by modifying Linux Kernel and using binary rewrite tool.
Appears in Collections:	[Graduate Institute of Computer Science and Information Engineering] Electronic Thesis & Dissertation

Files in This Item:

File	Description	Size	Format
index.html		0Kb	HTML	244	View/Open

社群 sharing