Packed, printable, and polymorphic return-oriented programming | |
Lu, Kangjie ; Zou, Dabi ; Wen, Weiping ; Gao, Debin | |
2011 | |
英文摘要 | Return-oriented programming (ROP) is an attack that has been shown to be able to circumvent W+X protection. However, it was not clear if ROP can be made as powerful as non-ROP malicious code in other aspects, e.g., be packed to make static analysis difficult, be printable to evade non-ASCII filtering, be polymorphic to evade signature-based detection, etc. Research in these potential advances in ROP is important in designing counter-measures. In this paper, we show that ROP code could be packed, printable, and polymorphic. We demonstrate this by proposing a packer that produces printable and polymorphic ROP code. It works on virtually any unpacked ROP code and produces packed code that is self-contained. We implement our packer and demonstrate that it works on both Windows XP and Windows 7 platforms. ? 2011 Springer-Verlag.; EI; 0 |
语种 | 英语 |
DOI标识 | 10.1007/978-3-642-23644-0_6 |
内容类型 | 其他 |
源URL | [http://ir.pku.edu.cn/handle/20.500.11897/325808] |
专题 | 软件与微电子学院 |
推荐引用方式 GB/T 7714 | Lu, Kangjie,Zou, Dabi,Wen, Weiping,et al. Packed, printable, and polymorphic return-oriented programming. 2011-01-01. |
个性服务 |
查看访问统计 |
相关权益政策 |
暂无数据 |
收藏/分享 |
除非特别说明,本系统中所有内容都受版权保护,并保留所有权利。
修改评论