TyPro: Forward CFI for C-Style Indirect Function Calls Using Type Propagation
Markus Bauer, Ilya Grishchenko, Christian Rossow
Abstract
Maliciously-overwritten function pointers in C programs often lead to arbitrary code execution. In principle, forward CFI schemes mitigate this problem by restricting indirect function calls to valid call targets only. However, existing forward CFI schemes either depend on specific hardware capabilities, or are too permissive (weakening security guarantees) or too strict (breaking compatibility).
Topics & Concepts
Computer scienceFunction (biology)Programming languageCompatibility (geochemistry)Computer securityDistributed computingTheoretical computer scienceEngineeringEvolutionary biologyChemical engineeringBiologySecurity and Verification in ComputingAdvanced Malware Detection TechniquesDiamond and Carbon-based Materials Research