Implementing a software vulnerabilities system

Essam Mohamed Elwan

ISBN 10: 6207459318 / ISBN 13: 9786207459315

Verlag: LAP LAMBERT Academic Publishing Jan 2024, 2024

Beschreibung

Neuware -Software bugs that result in memory corruption are a common and dangerous feature of systems developed in certain programming languages. Such bugs are security vulnerabilities if they can be leveraged by an attacker to trigger the execution of malicious code. Determining if such a possibility exists is a time consuming process and requires technical expertise in a number of areas. Often the only way to be sure that a bug is in fact exploitable by an attacker is to build a complete exploit. It is this process that we seek to automate. We present a novel algorithm that integrates data-flow analysis and a decision procedure with the aim of automatically building exploits. The exploits we generate are constructed to hijack the control flow of an application and redirect it to malicious code.Books on Demand GmbH, Überseering 33, 22297 Hamburg 76 pp. Englisch.

Bestandsnummer des Verkäufers 9786207459315

Bibliografische Details

• Titel: Implementing a software vulnerabilities system
• Verlag: LAP LAMBERT Academic Publishing Jan 2024
• Erscheinungsjahr: 2024
• Sprache: Englisch
• ISBN-10: 6207459318
• ISBN-13: 9786207459315
• Einband: Taschenbuch
• Zustand: Neu
• Abmessungen: 220B x 150 H x 5 T Millimeter Breite: 220 mm, Höhe: 150 mm, Tiefe: 5 mm
• Gewicht: 131 Gramm

Über diesen Titel

Inhaltsangabe

Software bugs that result in memory corruption are a common and dangerous feature of systems developed in certain programming languages. Such bugs are security vulnerabilities if they can be leveraged by an attacker to trigger the execution of malicious code. Determining if such a possibility exists is a time consuming process and requires technical expertise in a number of areas. Often the only way to be sure that a bug is in fact exploitable by an attacker is to build a complete exploit. It is this process that we seek to automate. We present a novel algorithm that integrates data-flow analysis and a decision procedure with the aim of automatically building exploits. The exploits we generate are constructed to hijack the control flow of an application and redirect it to malicious code.