Automatic fragmented layout for multi-module ROP
CSTR:
Author:
Affiliation:

(College of Electronic Engineering, National University of Defense Technology, Heifei 230000, China)

Clc Number:

TP311

Fund Project:

  • Article
  • |
  • Figures
  • |
  • Metrics
  • |
  • Reference
  • |
  • Related
  • |
  • Cited by
  • |
  • Materials
  • |
  • Comments
    Abstract:

    ROP (return-oriented programming) is a technique which is able to bypass the protection of the DEP (data execution prevention). The ROP can constitute a program that performs a specific function by searching for an appropriate assembly instruction fragment in the memory code area. Previous methods for automatic generation of ROP do not consider the limitation of the layout of ROP caused by the program memory requirement, which leads to poor practicability of ROP. In order to solve this problem, a new method for automatic fragmented layout of multi-module ROP based on symbolic execution was proposed. The ROP chain was divided into different modules on the basis of automatic ROP generation framework Q; the controllability of memory was dynamically analyzed by using symbolic execution tool S2E; the controllable memory areas for each ROP module was found, and the fragmented layout ROP was automatically constructed. Experiments show that, compared with the previous methods, the ROP chain generated by the proposed method can effectively reduce the requirements for the program memory controllability.

    Reference
    Related
    Cited by
Get Citation

HUANG Ning, HUANG Shuguang, PAN Zulie, CHANG Chao. Automatic fragmented layout for multi-module ROP[J]. Journal of National University of Defense Technology,2020,42(3):22-29.

Copy
Share
Article Metrics
  • Abstract:
  • PDF:
  • HTML:
  • Cited by:
History
  • Received:November 26,2018
  • Revised:
  • Adopted:
  • Online: July 06,2020
  • Published:
Article QR Code