TY - GEN
T1 - A Mathematical Model of Mitigating Memory Randomization Weakness via Moving Target Defense
AU - Aldossary, Sultan
AU - Allen, William
AU - Zhang, Shengzhi
N1 - Publisher Copyright:
© 2017 IEEE.
PY - 2018/12/4
Y1 - 2018/12/4
N2 - The address space randomization technique was proposed to make determining the address of a shared library more difficult since each instance of the program is loaded into a random base address. However, when address space randomization layout (ASLR) is implemented on a 32-bit system, an attacker can use a brute force attack to guess the address of the shared library. The main goal of the research described in this paper is to study the use of a dispatching algorithm and multiple back-end servers as a moving target defense technique to mitigate ASLR weaknesses. First, we present a brute force attack when the number of servers is known. Second, we present a brute force attack when the number of servers is unknown. Last, we present the probability of the attacker's success on both of the attacks.
AB - The address space randomization technique was proposed to make determining the address of a shared library more difficult since each instance of the program is loaded into a random base address. However, when address space randomization layout (ASLR) is implemented on a 32-bit system, an attacker can use a brute force attack to guess the address of the shared library. The main goal of the research described in this paper is to study the use of a dispatching algorithm and multiple back-end servers as a moving target defense technique to mitigate ASLR weaknesses. First, we present a brute force attack when the number of servers is known. Second, we present a brute force attack when the number of servers is unknown. Last, we present the probability of the attacker's success on both of the attacks.
KW - Buffer overflow attack
UR - http://www.scopus.com/inward/record.url?scp=85060633255&partnerID=8YFLogxK
U2 - 10.1109/CSCI.2017.338
DO - 10.1109/CSCI.2017.338
M3 - Conference contribution
AN - SCOPUS:85060633255
T3 - Proceedings - 2017 International Conference on Computational Science and Computational Intelligence, CSCI 2017
SP - 61
EP - 67
BT - Proceedings - 2017 International Conference on Computational Science and Computational Intelligence, CSCI 2017
A2 - Tinetti, Fernando G.
A2 - Tran, Quoc-Nam
A2 - Deligiannidis, Leonidas
A2 - Yang, Mary Qu
A2 - Yang, Mary Qu
A2 - Arabnia, Hamid R.
PB - Institute of Electrical and Electronics Engineers Inc.
T2 - 2017 International Conference on Computational Science and Computational Intelligence, CSCI 2017
Y2 - 14 December 2017 through 16 December 2017
ER -