Software security enhancing method based on binary rewrite and dynamic randomization

A dynamic randomization and software security technology, applied in computer security devices, instruments, electronic digital data processing, etc., can solve the problems of inability to defend against information leakage attacks, coarse randomization granularity, etc., to reduce the probability of successful attacks and randomize granularity. Refinement, randomization effect of entropy increase
CN105335656AInactive Publication Date: 2016-02-17NANJING UNIV
2 Cites 10 Cited by

Patent Information

Authority / Receiving Office
CN · China
Current Assignee / Owner
NANJING UNIV
Publication Date
2016-02-17
Estimated Expiration
Not applicable · inactive patent

Smart Images

  • Figure 1
    Figure 1
  • Figure 2
    Figure 2
  • Figure 3
    Figure 3
Patent Text Reader

Abstract

The invention provides a software security enhancing method based on binary rewrite and dynamic randomization, comprising the following modules: 1) static binary rewrite; 2) double-level mapping, namely from a process logical page to a logical page and from the logical page to a physical page; 3) a dynamic randomization mechanism periodically randomizes a process address space by taking pages as granularities; 4) a logical address mapping redirecting mechanism provides the logical address mapping a redirecting service for a process. According to the software security enhancing method based on the binary rewrite and the dynamic randomization, the randomization entropy of the process address space is remarkably improved through the fine granularity dynamic cyclical randomization, the successful probability of attacking of an attacker is lowered, and the security of the a computer system and software is improved.
Need to check novelty before this filing date? Find Prior Art

Description

technical field

[0001] The invention belongs to the field of computer technology, especially the field of system and software safety. The invention provides a software security enhancement method combined with binary rewriting and dynamic randomization, which is used to improve the security of the operating system and application software. Background technique

[0002] Computer technology has played a pivotal role in production and life, and it is becoming more and more important to ensure the security of computer systems and software. In the arms race of computer system and software security, the attacks that have appeared successively include: Buffer Overflow Attack, Code Injection Attack, Code Reuse Attack, Information Leakage Attack, etc.; Correspondingly, related defense mechanisms include: No-eXecute (NX), Address Space Layout Randomization (ASLR), etc.

[0003] Buffer overflow attack: a widely used and seriously harmful attack method has become an important problem ...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More