Companies Home Search Profile

Automated Software Diversity (Synthesis Lectures on Information Security, Privacy, and Trust)

Automated Software Diversity (Synthesis Lectures on Information Security, Privacy, and Trust)

Download pdf

Automated Software Diversity (Synthesis Lectures on Information Security, Privacy, and Trust)

Automated Software Diversity (Synthesis Lectures on Information Security, Privacy, and Trust)

Category

Software Testing

Automation

Software Engineering

Software Development

Author

Per Larsen

Stefan Brunthaler

Lucas Davi

Publication

Morgan & Claypool Publishers

0 View

Whereas user-facing applications are often written in modern languages, the firmware, operating system, support libraries, and virtual machines that underpin just about any modern computer system are still written in low-level languages that value flexibility and performance over convenience and safety. Programming errors in low-level code are often exploitable and can, in the worst case, give adversaries unfettered access to the compromised host system. This book provides an introduction to and overview of automatic software diversity techniques that, in one way or another, use randomization to greatly increase the difficulty of exploiting the vast amounts of low-level code in existence. Diversity-based defenses are motivated by the observation that a single attack will fail against multiple targets with unique attack surfaces. We introduce the many, often complementary, ways that one can diversify attack surfaces and provide an accessible guide to more than two decades worth of research on the topic. We also discuss techniques used in conjunction with diversity to prevent accidental disclosure of randomized program aspects and present an in-depth case study of one of our own diversification solutions.

'

Download pdf

ISBN-10

162705734X

ISBN-13

978-1627057349

Publisher

Morgan & Claypool Publishers

Price

0

File Type

PDF

Page No.

90

Per Larsen

Stefan Brunthaler

Stefan Brunthaler

Lucas Davi

Similar Books

Statistics for Data Scientists: An Introduction to Probability, Statistics, and Data Analysis (Undergraduate Topics in Computer Science)

Statistics for Data Scientists: An Introduction to Probability, Statistics, and Data Analysis (Undergraduate Topics in Computer Science)

Maurits Kaptein

Software Testing

Advanced Selenium Web Accessibility Testing: Software Automation Testing Secrets Revealed

Advanced Selenium Web Accessibility Testing: Software Automation Testing Secrets Revealed

Narayanan Palani

Software Testing

PLC and HMI Development with Siemens TIA Portal: Develop PLC and HMI programs using standard methods and structured approaches with TIA Portal V17

PLC and HMI Development with Siemens TIA Portal: Develop PLC and HMI programs using standard methods and structured approaches with TIA Portal V17

Liam Bee

Software Testing

Accelerating Nonprofit Impact with Salesforce: Implement Nonprofit Cloud for efficient and cost-effective operations to drive your nonprofit mission

Accelerating Nonprofit Impact with Salesforce: Implement Nonprofit Cloud for efficient and cost-effective operations to drive your nonprofit mission

Melissa Hill Dees

Software Testing

Hands-On Test Management with Jira: End-to-end test management with Zephyr, synapseRT, and Jenkins in Jira

Hands-On Test Management with Jira: End-to-end test management with Zephyr, synapseRT, and Jenkins in Jira

Afsana Atar

Software Testing

Real-World SRE: The Survival Guide for Responding to a System Outage and Maximizing Uptime

Real-World SRE: The Survival Guide for Responding to a System Outage and Maximizing Uptime

Nat Welch

Software Testing

Mastering Software Testing with JUnit 5: Comprehensive guide to develop high quality Java applications

Mastering Software Testing with JUnit 5: Comprehensive guide to develop high quality Java applications

Boni Garcia

Software Testing

Artificial Intelligence and Software Testing

Artificial Intelligence and Software Testing

Rex Black

Software Testing

Python Testing with pytest: Simple, Rapid, Effective, and Scalable

Python Testing with pytest: Simple, Rapid, Effective, and Scalable

Brian Okken

Software Testing

Take Control of Automating Your Mac, 4th Edition

Take Control of Automating Your Mac, 4th Edition

Joe Kissell

Robotic Process Automation Projects: Build real-world RPA solutions using UiPath and Automation Anywhere

Robotic Process Automation Projects: Build real-world RPA solutions using UiPath and Automation Anywhere

Arun Kumar Asokan

A Frontend Web Developer's Guide to Testing: Explore leading web test automation frameworks and their future driven by low-code and AI

A Frontend Web Developer's Guide to Testing: Explore leading web test automation frameworks and their future driven by low-code and AI

Eran Kinsbruner

Automation Testing

Democratizing Artificial Intelligence with UiPath: Expand automation in your organization to achieve operational efficiency and high performance

Democratizing Artificial Intelligence with UiPath: Expand automation in your organization to achieve operational efficiency and high performance

Fanny IP

Python Automation Cookbook: 75 Python automation ideas for web scraping, data wrangling, and processing Excel, reports, emails, and more, 2nd Edition

Python Automation Cookbook: 75 Python automation ideas for web scraping, data wrangling, and processing Excel, reports, emails, and more, 2nd Edition

Jaime Buelta

Low-Code Application Development with Appian: The practitioner's guide to high-speed business automation at enterprise scale using Appian

Low-Code Application Development with Appian: The practitioner's guide to high-speed business automation at enterprise scale using Appian

Stefan Helzle

Technologies to Advance Automation in Forensic Science and Criminal Investigation (Advances in Digital Crime, Forensics, and Cyber Terrorism)

Technologies to Advance Automation in Forensic Science and Criminal Investigation (Advances in Digital Crime, Forensics, and Cyber Terrorism)

Chung-Hao Chen

Practical Automation with PowerShell: Effective scripting from the console to the cloud

Practical Automation with PowerShell: Effective scripting from the console to the cloud

Matthew Dowst

Automata and Computability: A Programmer's Perspective

Automata and Computability: A Programmer's Perspective

Ganesh Gopalakrishnan

Software Testing

Automation and Computational Intelligence for Road Maintenance and Management: Advances and Applications

Automation and Computational Intelligence for Road Maintenance and Management: Advances and Applications

Hamzeh Zakeri

Network Programmability and Automation: Skills for the Next-Generation Network Engineer

Network Programmability and Automation: Skills for the Next-Generation Network Engineer

Matt Oswalt

Port Automation and Vehicle Scheduling

Port Automation and Vehicle Scheduling

Hassan Rashidi

Advances in Computer Science for Engineering and Manufacturing (Lecture Notes in Networks and Systems Book 463)

Advances in Computer Science for Engineering and Manufacturing (Lecture Notes in Networks and Systems Book 463)

Zhengbing Hu

Software Engineering

Fundamental Approaches to Software Engineering: 25th International Conference, FASE 2022, Held as Part of the European Joint Conferences on Theory and ... Notes in Computer Science Book 13241)

Fundamental Approaches to Software Engineering: 25th International Conference, FASE 2022, Held as Part of the European Joint Conferences on Theory and ... Notes in Computer Science Book 13241)

Einar Broch Johnsen

Software Engineering

Programming Languages and Systems: 31st European Symposium on Programming, ESOP 2022, Held as Part of the European Joint Conferences on Theory and Practice ... Notes in Computer Science Book 13240)

Programming Languages and Systems: 31st European Symposium on Programming, ESOP 2022, Held as Part of the European Joint Conferences on Theory and Practice ... Notes in Computer Science Book 13240)

Ilya Sergey

Software Engineering

Accelerator Programming Using Directives: 8th International Workshop, WACCPD 2021, Virtual Event, November 14, 2021, Proceedings (Lecture Notes in Computer Science Book 13194)

Accelerator Programming Using Directives: 8th International Workshop, WACCPD 2021, Virtual Event, November 14, 2021, Proceedings (Lecture Notes in Computer Science Book 13194)

Sridutt Bhalachandra

Software Engineering

Engineering Multi-Agent Systems: 9th International Workshop, EMAS 2021, Virtual Event, May 3–4, 2021, Revised Selected Papers (Lecture Notes in Computer Science Book 13190)

Engineering Multi-Agent Systems: 9th International Workshop, EMAS 2021, Virtual Event, May 3–4, 2021, Revised Selected Papers (Lecture Notes in Computer Science Book 13190)

Natasha Alechina

Software Engineering

Inductive Logic Programming: 30th International Conference, ILP 2021, Virtual Event, October 25–27, 2021, Proceedings (Lecture Notes in Computer Science Book 13191)

Inductive Logic Programming: 30th International Conference, ILP 2021, Virtual Event, October 25–27, 2021, Proceedings (Lecture Notes in Computer Science Book 13191)

Nikos Katzouris

Software Engineering

Dependable Software Engineering. Theories, Tools, and Applications: 7th International Symposium, SETTA 2021, Beijing, China, November 25–27, 2021, Proceedings ... Notes in Computer Science Book 13071)

Dependable Software Engineering. Theories, Tools, and Applications: 7th International Symposium, SETTA 2021, Beijing, China, November 25–27, 2021, Proceedings ... Notes in Computer Science Book 13071)

Shengchao Qin

Software Engineering

Applied and Computational Optimal Control: A Control Parametrization Approach (Springer Optimization and Its Applications Book 171)

Applied and Computational Optimal Control: A Control Parametrization Approach (Springer Optimization and Its Applications Book 171)

Kok Lay Teo

Software Engineering

Formal Methods for Software Engineering: Languages, Methods, Application Domains (Texts in Theoretical Computer Science. An EATCS Series)

Formal Methods for Software Engineering: Languages, Methods, Application Domains (Texts in Theoretical Computer Science. An EATCS Series)

Markus Roggenbach

Software Engineering

The C++ Workshop: Learn to write clean, maintainable code in C++ and advance your career in software engineering

The C++ Workshop: Learn to write clean, maintainable code in C++ and advance your career in software engineering

Dale Green

Software Engineering

Hands-On Game Development with WebAssembly: Learn WebAssembly C++ programming by building a retro space game

Hands-On Game Development with WebAssembly: Learn WebAssembly C++ programming by building a retro space game

Rick Battagline

Software Engineering

SAP Intelligent RPA for Developers: Automate business processes using SAP Intelligent RPA and learn the migration path to SAP Process Automation

SAP Intelligent RPA for Developers: Automate business processes using SAP Intelligent RPA and learn the migration path to SAP Process Automation

Vijaya Kumar Ganugula

Software Engineering

Programming Languages and Systems: 31st European Symposium on Programming, ESOP 2022, Held as Part of the European Joint Conferences on Theory and Practice ... Notes in Computer Science Book 13240)

Programming Languages and Systems: 31st European Symposium on Programming, ESOP 2022, Held as Part of the European Joint Conferences on Theory and Practice ... Notes in Computer Science Book 13240)

Ilya Sergey

Software Engineering

Foundations of Software Science and Computation Structures: 25th International Conference, FOSSACS 2022, Held as Part of the European Joint Conferences ... Notes in Computer Science Book 13242)

Foundations of Software Science and Computation Structures: 25th International Conference, FOSSACS 2022, Held as Part of the European Joint Conferences ... Notes in Computer Science Book 13242)

Patricia Bouyer

Software Architecture

Accelerator Programming Using Directives: 8th International Workshop, WACCPD 2021, Virtual Event, November 14, 2021, Proceedings (Lecture Notes in Computer Science Book 13194)

Accelerator Programming Using Directives: 8th International Workshop, WACCPD 2021, Virtual Event, November 14, 2021, Proceedings (Lecture Notes in Computer Science Book 13194)

Sridutt Bhalachandra

Software Engineering

Engineering Multi-Agent Systems: 9th International Workshop, EMAS 2021, Virtual Event, May 3–4, 2021, Revised Selected Papers (Lecture Notes in Computer Science Book 13190)

Engineering Multi-Agent Systems: 9th International Workshop, EMAS 2021, Virtual Event, May 3–4, 2021, Revised Selected Papers (Lecture Notes in Computer Science Book 13190)

Natasha Alechina

Software Engineering

Parallel and Distributed Computing, Applications and Technologies: 22nd International Conference, PDCAT 2021, Guangzhou, China, December 17–19, 2021, Proceedings ... Notes in Computer Science Book 13148)

Parallel and Distributed Computing, Applications and Technologies: 22nd International Conference, PDCAT 2021, Guangzhou, China, December 17–19, 2021, Proceedings ... Notes in Computer Science Book 13148)

Hong Shen

Software Development

Services Computing – SCC 2021: 18th International Conference, Held as Part of the Services Conference Federation, SCF 2021, Virtual Event, December 10–14, ... Notes in Computer Science Book 12995)

Services Computing – SCC 2021: 18th International Conference, Held as Part of the Services Conference Federation, SCF 2021, Virtual Event, December 10–14, ... Notes in Computer Science Book 12995)

Ajay Katangur

Formal Methods for Software Engineering: Languages, Methods, Application Domains (Texts in Theoretical Computer Science. An EATCS Series)

Formal Methods for Software Engineering: Languages, Methods, Application Domains (Texts in Theoretical Computer Science. An EATCS Series)

Markus Roggenbach

Software Engineering

Kafka Up and Running for Network DevOps: Set Your Network Data in Motion

Kafka Up and Running for Network DevOps: Set Your Network Data in Motion

Eric Chou

Software Development

JMP for Mixed Models

JMP for Mixed Models

Ruth Hummel

Software Development

Programming Concurrency on the JVM: Mastering Synchronization, STM, and Actors

Programming Concurrency on the JVM: Mastering Synchronization, STM, and Actors

Venkat Subramaniam

Software Development

Seven Languages in Seven Weeks: A Pragmatic Guide to Learning Programming Languages (Pragmatic Programmers)

Seven Languages in Seven Weeks: A Pragmatic Guide to Learning Programming Languages (Pragmatic Programmers)

Bruce Tate

Software Development

Building Applications with IBM Rational Application Developer and JavaBeans

Building Applications with IBM Rational Application Developer and JavaBeans

Colette Burrus

Software Development

Other Authors' Books

Other Publishing Books

Quantum Computing for Computer Architects

Quantum Computing for Computer Architects

Tzvetan S. Metodi

Computer Architecture

Transactional Memory (Synthesis Lectures on Computer Architecture, 2)

Transactional Memory (Synthesis Lectures on Computer Architecture, 2)

James Larus

Computer Architecture

Link Reversal Algorithms (Synthesis Lectures on Distributed Computing Theory, 8)

Link Reversal Algorithms (Synthesis Lectures on Distributed Computing Theory, 8)

Jennifer E. Walter

Embedded Systems Design with the Atmel AVR Microcontroller (Synthesis Lectures on Digital Circuits and Systems, 24)

Embedded Systems Design with the Atmel AVR Microcontroller (Synthesis Lectures on Digital Circuits and Systems, 24)

Steven Barrett

PIC Microcontroller

Advanced Metasearch Engine Technology (Synthessis Lectures on Data Management)

Advanced Metasearch Engine Technology (Synthessis Lectures on Data Management)

Weiyi Meng

Software Engineering

A Guide to Visual Multi-Level Interface Design From Synthesis of Empirical Study (Synthesis Lectures on Visualization)

A Guide to Visual Multi-Level Interface Design From Synthesis of Empirical Study (Synthesis Lectures on Visualization)

Tamara Munzner

Data Visualization

Analysis of the MPEG-1 Layer III (MP3) Algorithm Using MATLAB (Synthesis Lectures on Algorithms and Software in Engineering)

Analysis of the MPEG-1 Layer III (MP3) Algorithm Using MATLAB (Synthesis Lectures on Algorithms and Software in Engineering)

Jayaraman J. Thiagarajan

High-level Structures in Quantum Computing

High-level Structures in Quantum Computing

Jaroslaw Adam Miszczak

Visual Information Retrieval using Java and LIRE (Synthesis Lectures on Information Concepts, Retrieval, and Services, 25)

Visual Information Retrieval using Java and LIRE (Synthesis Lectures on Information Concepts, Retrieval, and Services, 25)

Mathias Lux

Signal Processing for Solar Array Monitoring, Fault Detection, and Optimization (Synthesis Lectures on Power Electronics, 4)

Signal Processing for Solar Array Monitoring, Fault Detection, and Optimization (Synthesis Lectures on Power Electronics, 4)

Andreas Spanias

Electrical Engineering

A Primer on Hardware Prefetching (Synthesis Lectures on Computer Architecture)

A Primer on Hardware Prefetching (Synthesis Lectures on Computer Architecture)

Babak Falsafi

Computer Architecture

Distributed Graph Coloring: Fundamentals and Recent Developments (Synthesis Lectures on Digital Computing Theory)

Distributed Graph Coloring: Fundamentals and Recent Developments (Synthesis Lectures on Digital Computing Theory)

Leonid Barenboim

CFA Chartered Financial Analyst

User Reviews

Log in first to post a comment

Rating

0

0

0

0

0

average 0

Total votes0