Protect the System Call, Protect (Most of) the World with BASTION
Christopher Jelesnianski, Mohannad Ismail, Yeongjin Jang, Dan Williams, Changwoo Min
Abstract
System calls are a critical building block in many serious security attacks, such as control-flow hijacking and privilege escalation attacks. Security-sensitive system calls (e.g., execve, mprotect), especially play a major role in completing attacks. Yet, few defense efforts focus to ensure their legitimate usage, allowing attackers to maliciously leverage system calls in attacks.
Topics & Concepts
Computer securityLeverage (statistics)Computer sciencePrivilege (computing)Focus (optics)Internet privacyOpticsMachine learningPhysicsSecurity and Verification in ComputingAdvanced Malware Detection TechniquesNetwork Security and Intrusion Detection