Dissertation > Excellent graduate degree dissertation topics show

An Advanced ROP Technique English ROP

Author: QinJiaJia
Tutor: XieLi; MaoBing
School: Nanjing University
Course: Computer technology
Keywords: code-injection attack Return-oriented programming ROP payload En-glish ROP English ROP decoder English ROP Packer
CLC: TP309
Type: Master's thesis
Year: 2012
Downloads: 28
Quote: 0
Read: Download Dissertation

Abstract


Code-injection attacks are perhaps one of the most common attacks on modern computer systems. As W⊕X was introduced, it largely mitigate the thread of code-injection attacks. However, a new type of code-reuse technique, Return-oriented pro-gramming(ROP), was introduced. It has been proved that ROP can circumvent W⊕X mechanism and perform arbitrary computation. After that, a lot of approaches were proposed to defend or detect the return-oriented attack. Recently, some new defenses were proposed. E.g., the deRop used to convert a ROP exploit into shellcode and the ROPScan used to scan the payload. These methods mainly focus on the ROP pay-load. They detected if there are continuous gadgets addresses included in the payload via dynamic and static techniques to make sure whether there is a ROP attack. In order to bypass these defenses, in this paper, we present an advanced ROP technique-English ROP. English ROP not only can achieve ROP’s capability, but also have the same representation and structure with the normal english text. Namely, it is diffi-cult to distinguish English ROP with normal english text without considering semantic information. Different from traditional ROP, English ROP is composed of printable gadgets and printable data. In this paper, we first prove that English ROP is turing-completeness, and then propose an algorithm for automatically constructing English ROP. In addition, based on English ROP, we construct two specific ROP obfuscation tools. One is a self-contained English ROP decoder which can be used to decode the encoded ROP payload. Using this decoder, we can construct any polymorphic ROP to circumvent payload-based defenses.The other is an English ROP Packer which can be used to get unprintable address.Our English ROP can include the gadgets ending in ret as well as the gadgets ending in call or jmp.

Related Dissertations

  1. Research on ROP Attack and Defense Technolodge on ARM,TP393.08
  2. Research on Security Mechanisms Evasion of Windows 7 Based on Reverse Analysis,TP393.08
  3. Design and Implementation of Windows Kernel-mode Cryptographic Service Interface,TP309.7
  4. The Design and Implementation of Security Mechanism of Embedded Dependable Computer,TP309
  5. Research on Iris Based Cryptography,TP309.7
  6. The Research of Dynamic Trust Model on Cloud Computing Platform,TP309
  7. Research of Sensitive Information Protection Techniques for Automated Trust Negotiation,TP309
  8. Study on the Access Control of the Court Information System,TP309
  9. Remote FPGA system design and implementation of security upgrades,TP309
  10. Research of Virus Detection Methods Based on Multiple Anti-virus Softwares Collaboration,TP309.5
  11. Research on Image Digital Watermarking Technology Based on CUDA,TP309.7
  12. Researches and Application on PKI and Digital Watermarking in the Electronic Seal System,TP309.7
  13. The Application Research of Database Synchronization Technology in Disaster Recovery System,TP309.3
  14. Based on WINDOWS platform file security mechanism,TP309
  15. High-speed network data encryption card circuit design and implementation,TP309.7
  16. Researches on Watermarking Algorithm and Its Application to Image Software of Electronic Signature,TP309.7
  17. The Research of Color Image Watermarking Algorithm Against Geometric Attacks,TP309.7
  18. Research on the Watermark Method Based on HVME and Contourlet,TP309.7
  19. Design and Implementation of PDF4172 Dbarcode Watermarking System Based on SOPC,TP309.7
  20. Based on Contourlet Transform Digital Watermarking Method,TP309.7
  21. Research on Blind Watermarking Technique of Digital Images Based on Contourlet Transform,TP309.7

CLC: > Industrial Technology > Automation technology,computer technology > Computing technology,computer technology > General issues > Security and confidentiality
© 2012 www.DissertationTopic.Net  Mobile