Trabalho em anais de eventoOpen Access
Position Paper: Towards a Hybrid Approach to Protect Against Memory Safety Vulnerabilities
ALSHMRANY, K.; BHAYAT, A.; BRAUSSE, F.; CORDEIRO, L. C.; KOROVIN, K.; MELHAM, T.; MUSTAFA, M. O.; OLIVIER, P.; REGER, G.; SHMAROV, F
Resumo
Resumo
Memory corruption bugs continue to plague low-level systems software, generally written in unsafe programming languages. In order to detect and protect against such exploits, many pre- and post-deployment techniques exist. In this position paper, we propose and motivate the need for a hybrid approach for the protection against memory safety vulnerabilities, com-bining techniques that can identify the presence (and absence) of vulnerabilities pre-deployment with those that can detect and mitigate such vulnerabilities post-deployment. Our proposed hy-brid approach involves three layers: hardware runtime protection provided by capability hardware, software runtime protection provided by compiler instrumentation, and static analysis pro-vided by bounded model checking and symbolic execution. The key aspect of the proposed hybrid approach is that the protection offered is greater than the sum of its parts - the expense of post-deployment runtime checks is potentially reduced via information obtained during pre-deployment analysis. During pre-deployment analysis, static checking can be guided by runtime information.
palavras-chave
Palavras-chave
runtime protectioncompiler instrumentationstatic analysisbounded model checkingsymbolic execution
Status
Published
links
Links e arquivos
Trabalho em anais de evento