Practical implications and requirements of diversifying interpreted languages



: Joni Uitto, Sampsa Rauti, Ville Leppänen

: Joseph P. Trien, Stacy J. Prowell, John R. Goodall

: Annual Cyber and Information Security Research Conference

: New York

: 2016

: Proceeding CISRC '16 Proceedings of the 11th Annual Cyber and Information Security Research Conference

: 14:1

: 14:4

: 978-1-4503-3752-6

DOI: https://doi.org/10.1145/2897795.2897796

: http://dl.acm.org/citation.cfm?doid=2897795.2897796


Instruction set randomization (ISR) provides a strong defense against
all types of injection attacks, especially in interpreted environments.
However, fully enabling a system to benefit from language interpreters
that support programs diversified with ISR requires several alterations
and considerations. In this paper we identify core challenges related to
enabling system-wide interpreter diversification. We also propose
possible solutions to each challenge and expand upon the existing
diversification schemes for interpreted languages.



Last updated on 2024-26-11 at 15:31