A Memory-Access Validation Scheme against Payload Injection Attacks
DC Field | Value | Language |
---|---|---|
dc.contributor.author | Ahn, Dongkyun | - |
dc.contributor.author | Lee, Gyungho | - |
dc.date.accessioned | 2021-09-04T14:51:19Z | - |
dc.date.available | 2021-09-04T14:51:19Z | - |
dc.date.created | 2021-06-16 | - |
dc.date.issued | 2015-07 | - |
dc.identifier.issn | 1545-5971 | - |
dc.identifier.uri | https://scholar.korea.ac.kr/handle/2021.sw.korea/93169 | - |
dc.description.abstract | The authenticity of a piece of data or an instruction is crucial in mitigating threats from various forms of software attack. In spite of the various forms of protection against malicious attacks exploiting spurious data, adversaries have been successful in circumventing such protection. This paper proposes a memory-access validation scheme that manages information on spurious data at the granularity of the cache line size. A validation unit based on the proposed scheme answers queries from other components in the processor so that spurious data can be blocked before control flow diversion. We describe the design of this validation unit as well as its integration into the memory hierarchy of a modern processor and assess its memory requirement and performance impact with two simulators. The experimental results show that our scheme is able to detect synthesized payload injection attacks and to manage taint information with a moderate memory overhead under an acceptable performance impact. | - |
dc.language | English | - |
dc.language.iso | en | - |
dc.publisher | IEEE COMPUTER SOC | - |
dc.subject | INFORMATION-FLOW TRACKING | - |
dc.title | A Memory-Access Validation Scheme against Payload Injection Attacks | - |
dc.type | Article | - |
dc.contributor.affiliatedAuthor | Lee, Gyungho | - |
dc.identifier.doi | 10.1109/TDSC.2014.2355844 | - |
dc.identifier.scopusid | 2-s2.0-84975229309 | - |
dc.identifier.wosid | 000357930000002 | - |
dc.identifier.bibliographicCitation | IEEE TRANSACTIONS ON DEPENDABLE AND SECURE COMPUTING, v.12, no.4, pp.387 - 399 | - |
dc.relation.isPartOf | IEEE TRANSACTIONS ON DEPENDABLE AND SECURE COMPUTING | - |
dc.citation.title | IEEE TRANSACTIONS ON DEPENDABLE AND SECURE COMPUTING | - |
dc.citation.volume | 12 | - |
dc.citation.number | 4 | - |
dc.citation.startPage | 387 | - |
dc.citation.endPage | 399 | - |
dc.type.rims | ART | - |
dc.type.docType | Article | - |
dc.description.journalClass | 1 | - |
dc.description.journalRegisteredClass | scie | - |
dc.description.journalRegisteredClass | scopus | - |
dc.relation.journalResearchArea | Computer Science | - |
dc.relation.journalWebOfScienceCategory | Computer Science, Hardware & Architecture | - |
dc.relation.journalWebOfScienceCategory | Computer Science, Information Systems | - |
dc.relation.journalWebOfScienceCategory | Computer Science, Software Engineering | - |
dc.subject.keywordPlus | INFORMATION-FLOW TRACKING | - |
dc.subject.keywordAuthor | Virtual memory | - |
dc.subject.keywordAuthor | security | - |
Items in ScholarWorks are protected by copyright, with all rights reserved, unless otherwise indicated.
(02841) 서울특별시 성북구 안암로 14502-3290-1114
COPYRIGHT © 2021 Korea University. All Rights Reserved.
Certain data included herein are derived from the © Web of Science of Clarivate Analytics. All rights reserved.
You may not copy or re-distribute this material in whole or in part without the prior written consent of Clarivate Analytics.