Advertisement
Published in:
2015 | OriginalPaper | Chapter
ISA\(^2\)R: Improving Software Attack and Analysis Resilience via Compiler-Level Software Diversity
Authors : Rafael Fedler, Sebastian Banescu, Alexander Pretschner
Published in: Computer Safety, Reliability, and Security
Publisher: Springer International Publishing
Activate our intelligent search to find suitable subject content or patents.
Select sections of text to find matching patents with Artificial Intelligence. powered by
Select sections of text to find additional relevant content using AI-assisted search. powered by
Abstract
The current IT landscape is characterized by software monoculture: All installations of one program version are identical. This leads to a huge return of investment for attackers who can develop a single attack once to compromise millions of hosts worldwide. Software diversity has been proposed as an alternative to software monoculture. In this paper we present a collection of diversification transformations called ISA\(^2\)R, developed for the low-level virtual machine (LLVM). By diversifying the properties crucial to successful exploitation of a vulnerability, we render exploits that work on one installation of a software ineffective against others. Through this we enable developers to add protective measures automatically during compilation. In contrast to similar existing tools, ISA\(^2\)R provides protection against a wider range of attacks and is applicable to all programming languages supported by LLVM.