loading...
 This Article 
   
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
First International Conference on Availability, Reliability and Security (ARES'06)
A Practical Framework for Dynamically Immunizing Software Security Vulnerabilities
Vienna, Austria
April 20-April 22
ISBN: 0-7695-2567-9
Zhiqiang Lin, Nanjing University, Nanjing, 210093, China
Bing Mao, Nanjing University, Nanjing, 210093, China
Li Xie, Nanjing University, Nanjing, 210093, China
Many security attacks are caused by software vulnerabilities such as buffer overflow. How to eliminate or mitigate these vulnerabilities, in particular with unstoppable software, is a great challenge for security researchers and practitioners. In this paper, we propose a practical framework to immunize software security vulnerabilities on the fly. We achieve the vulnerability immunization by using a security antibody, which can be implemented independently from the protected software and is used to defend against vulnerability exploitation attacks. And we employ in-core patching technique to attach the antibody quietly into running process, and hence we neither need to re-compile nor re-execute the protected software. The effectiveness of our framework depends on the effectiveness of the antibody that is implemented by redirecting flaw functions into secure ones. As a proof of concept, we have built a prototype and applied it to prevent the software from buffer overflow attacks. Preliminary experimental results show that our framework is practical and efficient for the dynamical immunization of software security vulnerabilities.
Citation:
Zhiqiang Lin, Bing Mao, Li Xie, "A Practical Framework for Dynamically Immunizing Software Security Vulnerabilities," ares, pp.348-357, First International Conference on Availability, Reliability and Security (ARES'06), 2006
Usage of this product signifies your acceptance of the Terms of Use.