Hey Frenzz ...
Microsoft announced the winners of BlueHat Prize, Award, established last year in order to facilitate the development of new capabilities to mitigate and prevent exploits. The main prize, $ 250 000 was awarded to a developer for Vassilis Pappas kBouncer, the concept of offering effective protection against attacks using back-Oriented Programming (ROP).
The main problem in detecting attacks that use ROP, is that they are legitimate utilize existing pieces of code that makes it necessary to analyze the context in which code is used. kBouncer uses the commercial processors Intel LBR for verification of critical system functions. Since LBR is a function of the hardware processor, kBouncer, is said to have no effect on system performance.
The concept of Ivan Fratrika ROPGuard took second place and provides five additional checks when you call the important functions of the system. The concept is designed to verify that the function was called through CALL, and not, for example, the closure of RET at the end of «ROP-gadget."
The main problem in detecting attacks that use ROP, is that they are legitimate utilize existing pieces of code that makes it necessary to analyze the context in which code is used. kBouncer uses the commercial processors Intel LBR for verification of critical system functions. Since LBR is a function of the hardware processor, kBouncer, is said to have no effect on system performance.
The concept of Ivan Fratrika ROPGuard took second place and provides five additional checks when you call the important functions of the system. The concept is designed to verify that the function was called through CALL, and not, for example, the closure of RET at the end of «ROP-gadget."
0 comments:
Post a Comment