A4 Refereed article in a conference publication
Practical implications and requirements of diversifying interpreted languages
Authors: Joni Uitto, Sampsa Rauti, Ville Leppänen
Editors: Joseph P. Trien, Stacy J. Prowell, John R. Goodall
Conference name: Annual Cyber and Information Security Research Conference
Publishing place: New York
Publication year: 2016
Book title : Proceeding CISRC '16 Proceedings of the 11th Annual Cyber and Information Security Research Conference
First page : 14:1
Last page: 14:4
ISBN: 978-1-4503-3752-6
DOI: https://doi.org/10.1145/2897795.2897796
Web address : http://dl.acm.org/citation.cfm?doid=2897795.2897796
Instruction set randomization (ISR) provides a strong defense against
all types of injection attacks, especially in interpreted environments.
However, fully enabling a system to benefit from language interpreters
that support programs diversified with ISR requires several alterations
and considerations. In this paper we identify core challenges related to
enabling system-wide interpreter diversification. We also propose
possible solutions to each challenge and expand upon the existing
diversification schemes for interpreted languages.
