Loading…
25th USENIX Security Symposium has ended
Back To Schedule
Thursday, August 11 • 10:00am - 10:30am
Micro-Virtualization Memory Tracing to Detect and Prevent Spraying Attacks

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

Tweet Share
Spraying is a common payload delivery technique used by attackers to execute arbitrary code in presence of Address Space Layout Randomisation (ASLR). In this paper we present Graffiti, an efficient hypervisorbased memory analysis framework for the detection and prevention of spraying attacks. Compared with previous solutions, our system is the first to offer an efficient, complete, extensible, and OS independent protection against all spraying techniques known to date. We developed a prototype open source framework based on our approach, and we thoroughly evaluated it against all known variations of spraying attacks on two operating systems: Linux and Microsoft Windows. Our tool can be applied out of the box to protect any application, and its overhead can be tuned according to the application behavior and to the desired level of protection.
Speakers
DB

Davide Balzarotti

Professor, Eurecom Institute, France
Davide Balzarotti is a Professor in the Digital Security Department at Eurecom, in the French Riviera. His research interests cover most aspects of system security and in particular the areas of binary and malware analysis, reverse engineering, computer forensics, and web security... Read More →
SC
MG
AL
MP

Thursday August 11, 2016 10:00am - 10:30am PDT
Zilker Ballroom 3
  Security '16

Attendees (5)