A4 Vertaisarvioitu artikkeli konferenssijulkaisussa
Practical implications and requirements of diversifying interpreted languages
Tekijät: Joni Uitto, Sampsa Rauti, Ville Leppänen
Toimittaja: Joseph P. Trien, Stacy J. Prowell, John R. Goodall
Konferenssin vakiintunut nimi: Annual Cyber and Information Security Research Conference
Kustannuspaikka: New York
Julkaisuvuosi: 2016
Kokoomateoksen nimi: Proceeding CISRC '16 Proceedings of the 11th Annual Cyber and Information Security Research Conference
Aloitussivu: 14:1
Lopetussivu: 14:4
ISBN: 978-1-4503-3752-6
DOI: https://doi.org/10.1145/2897795.2897796
Verkko-osoite: http://dl.acm.org/citation.cfm?doid=2897795.2897796
Instruction set randomization (ISR) provides a strong defense against
all types of injection attacks, especially in interpreted environments.
However, fully enabling a system to benefit from language interpreters
that support programs diversified with ISR requires several alterations
and considerations. In this paper we identify core challenges related to
enabling system-wide interpreter diversification. We also propose
possible solutions to each challenge and expand upon the existing
diversification schemes for interpreted languages.