A4 Vertaisarvioitu artikkeli konferenssijulkaisussa

Practical implications and requirements of diversifying interpreted languages




TekijätJoni Uitto, Sampsa Rauti, Ville Leppänen

ToimittajaJoseph P. Trien, Stacy J. Prowell, John R. Goodall

Konferenssin vakiintunut nimiAnnual Cyber and Information Security Research Conference

KustannuspaikkaNew York

Julkaisuvuosi2016

Kokoomateoksen nimiProceeding CISRC '16 Proceedings of the 11th Annual Cyber and Information Security Research Conference

Aloitussivu14:1

Lopetussivu14:4

ISBN978-1-4503-3752-6

DOIhttps://doi.org/10.1145/2897795.2897796

Verkko-osoitehttp://dl.acm.org/citation.cfm?doid=2897795.2897796


Tiivistelmä

Instruction set randomization (ISR) provides a strong defense against
all types of injection attacks, especially in interpreted environments.
However, fully enabling a system to benefit from language interpreters
that support programs diversified with ISR requires several alterations
and considerations. In this paper we identify core challenges related to
enabling system-wide interpreter diversification. We also propose
possible solutions to each challenge and expand upon the existing
diversification schemes for interpreted languages.



Last updated on 2024-26-11 at 15:31