21 search results - page 1 / 5 » Code Pointer Masking: Hardening Applications against Code In... |
DIMVA
2011
12 years 7 months ago
2011
In this paper we present an efficient countermeasure against code injection attacks. Our countermeasure does not rely on secret values such as stack canaries and protects against a...
CSFW
2011
IEEE
12 years 4 months ago
2011
IEEE
—This paper introduces YARRA, a conservative extension to C to protect applications from non-control data attacks. YARRA programmers specify their data integrity requirements by ...
RAID
2005
Springer
13 years 9 months ago
2005
Springer
Abstract. Injection vulnerabilities pose a major threat to applicationlevel security. Some of the more common types are SQL injection, crosssite scripting and shell injection vulne...
ACSAC
2006
IEEE
13 years 10 months ago
2006
IEEE
Instruction Set Randomization (ISR) has been proposed as a form of defense against binary code injection into an executing program. One proof-of-concept implementation is Randomiz...
CCS
2009
ACM
13 years 7 months ago
2009
ACM
Code injections attacks are one of the most powerful and important classes of attacks on software. In such attacks, the attacker sends malicious input to a software application, w...