Anzeige
Erschienen in:
2015 | OriginalPaper | Buchkapitel
ISA\(^2\)R: Improving Software Attack and Analysis Resilience via Compiler-Level Software Diversity
verfasst von : Rafael Fedler, Sebastian Banescu, Alexander Pretschner
Erschienen in: Computer Safety, Reliability, and Security
Aktivieren Sie unsere intelligente Suche, um passende Fachinhalte oder Patente zu finden.
Wählen Sie Textabschnitte aus um mit Künstlicher Intelligenz passenden Patente zu finden. powered by
Markieren Sie Textabschnitte, um KI-gestützt weitere passende Inhalte zu finden. powered by
Abstract
The current IT landscape is characterized by software monoculture: All installations of one program version are identical. This leads to a huge return of investment for attackers who can develop a single attack once to compromise millions of hosts worldwide. Software diversity has been proposed as an alternative to software monoculture. In this paper we present a collection of diversification transformations called ISA\(^2\)R, developed for the low-level virtual machine (LLVM). By diversifying the properties crucial to successful exploitation of a vulnerability, we render exploits that work on one installation of a software ineffective against others. Through this we enable developers to add protective measures automatically during compilation. In contrast to similar existing tools, ISA\(^2\)R provides protection against a wider range of attacks and is applicable to all programming languages supported by LLVM.