Bibliographic Details
| Title: |
Independence from obfuscation: A semantic framework for diversity. |
| Authors: |
Pucella, Riccardo1 riccardo@ccs.neu.edu, Schneider, Fred B.2 fbs@cs.cornell.edu |
| Source: |
Journal of Computer Security. 2010, Vol. 18 Issue 5, p701-749. 49p. 11 Diagrams. |
| Subjects: |
Replication (Experimental design), Imperative programming, Programmed instruction writing, Memory, Web typography, Layout (Printing) |
| Abstract: |
A set of replicas is diverse to the extent that they implement the same functionality but differ in their implementation details. Diverse replicas are less likely to succumb to the same attacks, when attacks depend on memory layout and/or other implementation details. Recent work advocates using mechanical means, such as program rewriting, to create such diversity. A correspondence between the specific transformations being employed and the attacks they defend against is often provided, but little has been said about the overall effectiveness of diversity per se in defending against attacks. With this broader goal in mind, this paper gives a precise characterization of attacks, applicable to viewing diversity as a defense, and also shows how mechanically-generated diversity compares to a well-understood defense: type checking. [ABSTRACT FROM AUTHOR] |
|
Copyright of Journal of Computer Security is the property of Sage Publications Inc. and its content may not be copied or emailed to multiple sites without the copyright holder's express written permission. Additionally, content may not be used with any artificial intelligence tools or machine learning technologies. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract. (Copyright applies to all Abstracts.) |
| Database: |
Engineering Source |
