Full context-sensitive program control flow integrity protection method and system

Abstract

The invention discloses a full context-sensitive program control flow integrity protection method and system. According to the method, during an offline analysis stage, control flow information of a program is collected through simulative execution; an executive path is tracked during operation; the executive path, reaching a same indirect branch, of a process is tracked; path information is matched with the control flow information; if the matching succeeds, it is showed that a simulative executive path during offline analysis is the same as a real executive path during operation, and a subsequent legal target address can be judged according to the control flow information in the offline analysis; and if a target address during operation is different from the legal target address, it is judged that the program suffers from control flow hijack attack, so that a control flow check module notifies a process tracking module to stop the process. The invention furthermore discloses the full context-sensitive program control flow integrity protection system. The integrity protection is realized by tracking and checking executive path information, so that the program is prevented from being threatened by the control flow hijack attack.

Description

technical field [0001] The invention belongs to the field of software integrity protection, and more particularly relates to a method and system for completely context-sensitive program control flow integrity protection. Background technique [0002] Buffer overflow vulnerabilities are common in today's software. By exploiting the buffer overflow vulnerability, the attacker can read and write the memory arbitrarily, thereby modifying the code pointer, and finally hijacking the control flow to complete the attack intention. In order to protect memory security, academic and industrial circles continue to research and deploy effective protection measures. However, there are still many attack techniques that can bypass the above existing protection measures. For this reason, the concept of control flow integrity is proposed. Control flow integrity protection does not directly protect memory security, but checks whether the control flow has been hijacked to determine whether i...

AI Technical Summary

Problems solved by technology

[0006] The current control flow integrity protection method does not consider context sensitivity or only considers partial context sensitivity, resulting in the generated control flow graph containing many illegal control flow edges, which can be exploited by attackers to bypass inspection

The current control flow integrity protection methods use stub technology to insert inspection codes at runtime, which destroys the transparency of the protection method, causing attackers to perceive the existence of the protection method and use the vulnerabilities of the protected program to tamper with the inspection logic

Some control flow integrity protection methods are not compatible with special control flow transfers, so they are not suitable for complex large projects

Images