Defence against code injection attacks

Hussein Alnabulsi; Quazi Mamun; MD Rafiqul Islam; Morshed U. Chowdhury

doi:10.1007/978-3-319-23802-9_19

Defence against code injection attacks

Hussein Alnabulsi, Quazi Mamun, MD Rafiqul Islam, Morshed U. Chowdhury

Research output: Book chapter/Published conference paper › Conference paper › peer-review

1 Citation (Scopus)

2 Downloads (Pure)

Abstract

Code injection attacks are considered serious threats to the Internet users. In this type of attack the attacker injects malicious codes in the user programs to change or divert the execution flows. In this paper we explore the contemporary defence strategies against code injection attacks (CIAs) and underline their limitations. To overcome these limitations, we suggest a number of countermeasure mechanisms for protecting from CIAs. Our key idea relies on the multiplexing technique to preserve the exact return code to ensure the integrity of program execution trace of shell code. This technique also maintains a FIFO (first in first out) queue to defeat the conflict state when multiple caller method makes a call simultaneously. Finally, our technique can provide better performance, in terms of protection and speed, in some point compared to the CFI (control flow integrity) as well as CPM (code pointer masking) techniques.

Original language	English
Title of host publication	Proceedings of the International Conference on Security and Privacy in Communication Networks
Subtitle of host publication	10th International ICST Conference, SecureComm 2014
Editors	Mudhakar Tian, Srivatsa Jing, Jiwu Jing
Place of Publication	Switzerland
Publisher	Springer
Pages	237-251
Number of pages	15
Volume	153
ISBN (Electronic)	9783319238029
ISBN (Print)	9783319238012
DOIs	https://doi.org/10.1007/978-3-319-23802-9_19
Publication status	Published - 2015
Event	10th International Conference on Security and Privacy in Communication Networks: SecureComm 2014 - Beijing, China, Beijing, China Duration: 24 Sept 2014 → 26 Sept 2014 https://link.springer.com/content/pdf/10.1007%2F978-3-319-23802-9.pdf http://archive.securecomm.org/2014/show/home

Publication series

Name
ISSN (Print)	1867-8211

Conference

Conference	10th International Conference on Security and Privacy in Communication Networks
Country/Territory	China
City	Beijing
Period	24/09/14 → 26/09/14
Other	SecureComm'14 seeks high-quality research contributions in the form of well developed papers. Topics of interest encompass research advances in ALL areas of secure communications and networking. Topics in other areas (e.g., formal methods, database security, secure software, applied cryptography) will also be considered if a clear connection to private or secure communications/networking is demonstrated. The aim of SecureComm is to bring together security and privacy experts in academia, industry and government as well as practitioners, standards developers and policy makers, in order to engage in a discussion about common goals and explore important research directions in the field. SecureComm also serves as a venue for learning about state-of-the-art in security and privacy research, giving attendees the opportunity to network with experts in the field.
Internet address	https://link.springer.com/content/pdf/10.1007%2F978-3-319-23802-9.pdf http://archive.securecomm.org/2014/show/home

Access to Document

10.1007/978-3-319-23802-9_19

Cite this

Alnabulsi, H., Mamun, Q., Islam, MD. R., & Chowdhury, M. U. (2015). Defence against code injection attacks. In M. Tian, S. Jing, & J. Jing (Eds.), Proceedings of the International Conference on Security and Privacy in Communication Networks: 10th International ICST Conference, SecureComm 2014 (Vol. 153, pp. 237-251). Springer. https://doi.org/10.1007/978-3-319-23802-9_19

@inproceedings{dc53a82882f24ddf87a655c20175fad5,

title = "Defence against code injection attacks",

abstract = "Code injection attacks are considered serious threats to the Internet users. In this type of attack the attacker injects malicious codes in the user programs to change or divert the execution flows. In this paper we explore the contemporary defence strategies against code injection attacks (CIAs) and underline their limitations. To overcome these limitations, we suggest a number of countermeasure mechanisms for protecting from CIAs. Our key idea relies on the multiplexing technique to preserve the exact return code to ensure the integrity of program execution trace of shell code. This technique also maintains a FIFO (first in first out) queue to defeat the conflict state when multiple caller method makes a call simultaneously. Finally, our technique can provide better performance, in terms of protection and speed, in some point compared to the CFI (control flow integrity) as well as CPM (code pointer masking) techniques.",

keywords = "Security; Code injection attacks; Malicious",

author = "Hussein Alnabulsi and Quazi Mamun and Islam, {MD Rafiqul} and Chowdhury, {Morshed U.}",

note = "Imported on 03 May 2017 - DigiTool details were: publisher = Switzerland: Springer, 2015. editor/s (773b) = Jing Tian, Mudhakar Srivatsa & Jiwu Jing; Event dates (773o) = September 24-26, 2014; Parent title (773t) = International Conference on Security and Privacy in Communication Networks. ISSNs: 1867-8211; ; 10th International Conference on Security and Privacy in Communication Networks : SecureComm 2014 ; Conference date: 24-09-2014 Through 26-09-2014",

year = "2015",

doi = "10.1007/978-3-319-23802-9_19",

language = "English",

isbn = "9783319238012",

volume = "153",

publisher = "Springer",

pages = "237--251",

editor = "Tian, {Mudhakar } and { Jing}, Srivatsa and Jing, {Jiwu }",

booktitle = "Proceedings of the International Conference on Security and Privacy in Communication Networks",

address = "United States",

url = "https://link.springer.com/content/pdf/10.1007%2F978-3-319-23802-9.pdf, http://archive.securecomm.org/2014/show/home",

}

Alnabulsi, H, Mamun, Q , Islam, MDR & Chowdhury, MU 2015, Defence against code injection attacks. in M Tian, S Jing & J Jing (eds), Proceedings of the International Conference on Security and Privacy in Communication Networks: 10th International ICST Conference, SecureComm 2014. vol. 153, Springer, Switzerland, pp. 237-251, 10th International Conference on Security and Privacy in Communication Networks, Beijing, China, 24/09/14. https://doi.org/10.1007/978-3-319-23802-9_19

Defence against code injection attacks. / Alnabulsi, Hussein; Mamun, Quazi ; Islam, MD Rafiqul et al.
Proceedings of the International Conference on Security and Privacy in Communication Networks: 10th International ICST Conference, SecureComm 2014. ed. / Mudhakar Tian; Srivatsa Jing; Jiwu Jing. Vol. 153 Switzerland: Springer, 2015. p. 237-251.

Research output: Book chapter/Published conference paper › Conference paper › peer-review

TY - GEN

T1 - Defence against code injection attacks

AU - Alnabulsi, Hussein

AU - Mamun, Quazi

AU - Islam, MD Rafiqul

AU - Chowdhury, Morshed U.

N1 - Imported on 03 May 2017 - DigiTool details were: publisher = Switzerland: Springer, 2015. editor/s (773b) = Jing Tian, Mudhakar Srivatsa & Jiwu Jing; Event dates (773o) = September 24-26, 2014; Parent title (773t) = International Conference on Security and Privacy in Communication Networks. ISSNs: 1867-8211;

PY - 2015

Y1 - 2015

N2 - Code injection attacks are considered serious threats to the Internet users. In this type of attack the attacker injects malicious codes in the user programs to change or divert the execution flows. In this paper we explore the contemporary defence strategies against code injection attacks (CIAs) and underline their limitations. To overcome these limitations, we suggest a number of countermeasure mechanisms for protecting from CIAs. Our key idea relies on the multiplexing technique to preserve the exact return code to ensure the integrity of program execution trace of shell code. This technique also maintains a FIFO (first in first out) queue to defeat the conflict state when multiple caller method makes a call simultaneously. Finally, our technique can provide better performance, in terms of protection and speed, in some point compared to the CFI (control flow integrity) as well as CPM (code pointer masking) techniques.

AB - Code injection attacks are considered serious threats to the Internet users. In this type of attack the attacker injects malicious codes in the user programs to change or divert the execution flows. In this paper we explore the contemporary defence strategies against code injection attacks (CIAs) and underline their limitations. To overcome these limitations, we suggest a number of countermeasure mechanisms for protecting from CIAs. Our key idea relies on the multiplexing technique to preserve the exact return code to ensure the integrity of program execution trace of shell code. This technique also maintains a FIFO (first in first out) queue to defeat the conflict state when multiple caller method makes a call simultaneously. Finally, our technique can provide better performance, in terms of protection and speed, in some point compared to the CFI (control flow integrity) as well as CPM (code pointer masking) techniques.

KW - Security; Code injection attacks; Malicious

UR - https://link.springer.com/content/pdf/10.1007%2F978-3-319-23802-9.pdf

U2 - 10.1007/978-3-319-23802-9_19

DO - 10.1007/978-3-319-23802-9_19

M3 - Conference paper

SN - 9783319238012

VL - 153

SP - 237

EP - 251

BT - Proceedings of the International Conference on Security and Privacy in Communication Networks

A2 - Tian, Mudhakar

A2 - Jing, Srivatsa

A2 - Jing, Jiwu

PB - Springer

CY - Switzerland

T2 - 10th International Conference on Security and Privacy in Communication Networks

Y2 - 24 September 2014 through 26 September 2014

ER -

Defence against code injection attacks

Abstract

Publication series

Conference

Access to Document

Other files and links

Fingerprint

Cite this