Skip to search formSkip to main contentSkip to account menu
The KeyNote Trust-Management System Version 2
This memo describes version 2 of the KeyNote trust-management system. It specifies the syntax and semantics of KeyNote `assertions', describes `action attribute' processing, and outlines the…
View via Publisher
SOS: secure overlay services
TLDR
This work proposes an architecture called Secure Overlay Services (SOS) that proactively prevents DoS attacks, geared toward supporting Emergency Services or similar types of communication, and demonstrates that such an architecture reduces the likelihood of a successful attack to minuscule levels.
View on ACM
Smashing the Gadgets: Hindering Return-Oriented Programming Using In-place Code Randomization
TLDR
In-place code randomization is presented, a practical mitigation technique against ROP attacks that can be applied directly on third-party software and is easily used in tandem with existing exploit mitigations such as address space layout randomization.
View on IEEE
Transparent ROP Exploit Mitigation Using Indirect Branch Tracing
TLDR
KBouncer, a practical runtime ROP exploit prevention technique for the protection of third-party applications based on the detection of abnormal control transfers that take place during ROP code execution, has low runtime overhead when stressed with specially crafted workloads.
View Paper
Countering code-injection attacks with instruction-set randomization
TLDR
A new, general approach for safeguarding systems against any type of code-injection attack, by creating process-specific randomized instruction sets of the system executing potentially vulnerable software that can serve as a low-overhead protection mechanism, and can easily complement other mechanisms.
View on ACM
SQLrand: Preventing SQL Injection Attacks
TLDR
This work applies the concept of instruction-set randomization to SQL, creating instances of the language that are unpredictable to the attacker, and shows how to use this technique with the MySQL database using an intermediary proxy that translates the random SQL to its standard language.
View via Publisher
libdft: practical dynamic data flow tracking for commodity systems
Dynamic data flow tracking (DFT) deals with tagging and tracking data of interest as they propagate during program execution. DFT has been repeatedly implemented by a variety of tools for numerous…
View on ACM
The Spy in the Sandbox: Practical Cache Attacks in JavaScript and their Implications
TLDR
This attack, which is an extension to the last-level cache attacks of Liu et al., allows a remote adversary to recover information belonging to other processes, users, and even virtual machines running on the same physical host with the victim web browser.
View on ACM
KeyNote: Trust Management for Public-Key Infrastructures (Position Paper)
TLDR
The rationale for designing a simple trust-management system for public-key infrastructures, called KeyNote, based on the motivating principles are expressibility, simplicity, and extensibility is discussed.
View via Publisher
SOS: an architecture for mitigating DDoS attacks
TLDR
This work evaluates the likelihood that an attacker can successfully launch a DoS attack against an SOS-protected network, and demonstrates that such an architecture reduces the likelihood of a successful attack to minuscule levels.
View on IEEE
...
...
By clicking accept or continuing to use the site, you agree to the terms outlined in our Privacy Policy, Terms of Service, and Dataset License