Preventing memory error exploits with WIT

Add to your list(s) Download to your calendar using vCal

• Periklis Akritidis (University of Cambridge)
• Thursday 27 March 2008, 16:30-17:30
• Lecture Theatre 2, Computer Laboratory, William Gates Builiding.

If you have a question about this talk, please contact Eiko Yoneki.

Attacks often exploit memory errors to gain control over the execution of vulnerable programs. These attacks remain a serious problem despite previous research on techniques to prevent them. We believe there are two reasons for this: techniques that are used to prevent these attacks fail to prevent many attacks; and most techniques are not used because they have high overhead or they require non-trivial changes to the source code or the language runtime. We present Write Integrity Testing (WIT), a new technique that provides practical protection from these attacks. We discuss an efficient implementation with optimizations to reduce space and time overhead. This implementation can be used in practice because it compiles C and C++ programs without modifications, it has high coverage with no false positives, and it has low overhead.

Periklis Akritidis is a second year PhD student with the Systems Research Group under the supervision of Dr. Steven Hand. This is joint work with Cristian Cadar, Costin Raiciu, Manuel Costa and Miguel Castro from Microsoft Research.

This talk is part of the Computer Laboratory Systems Research Group Seminar series.

This talk is included in these lists:

• All Talks (aka the CURE list)
• CL's SRG seminar
• Cambridge Centre for Data-Driven Discovery (C2D3)
• Cambridge talks
• Chris Davis' list
• Computer Laboratory Systems Research Group Seminar
• Department of Computer Science and Technology talks and seminars
• Interested Talks
• Lecture Theatre 2, Computer Laboratory, William Gates Builiding
• School of Technology
• Trust & Technology Initiative - interesting events
• bld31
• ndk22's list
• ob366-ai4er
• rp587

Note that ex-directory lists are not shown.