Data Randomization

نویسندگان

  • Cristian Cadar
  • Periklis Akritidis
  • Manuel Costa
  • Miguel Castro
چکیده

Abstract Attacks that exploit memory errors are still a serious problem. We present data randomization, a new technique that provides probabilistic protection against these attacks by xoring data with random masks. Data randomization uses static analysis to partition instruction operands into equivalence classes: it places two operands in the same class if they may refer to the same object in an execution that does not violate memory safety. Then it assigns a random mask to each class and it generates code instrumented to xor data read from or written to memory with the mask of the memory operand’s class. Therefore, attacks that violate the results of the static analysis have unpredictable results. We implemented a data randomization prototype that compiles programs without modifications and can prevent many attacks with low overhead. Our prototype prevents all the attacks in our benchmarks while introducing an average runtime overhead of 11% (0% to 27%) and an average space overhead below 1%.

برای دانلود رایگان متن کامل این مقاله و بیش از 32 میلیون مقاله دیگر ابتدا ثبت نام کنید

ثبت نام

اگر عضو سایت هستید لطفا وارد حساب کاربری خود شوید

منابع مشابه

A Monte Carlo Analysis of the Fisher Randomization Technique: Reviving Randomization for Experimental Economists

Data created in a controlled laboratory setting are a relatively new phenomenon to economists. Traditional data analysis methods using either parametric or nonparametric tests are not necessarily the best option available to economists analyzing laboratory data. In 1935, Fisher proposed the randomization technique as an alternative data analysis method when examining treatment effects. The obse...

متن کامل

Dynamic randomization and a randomization model for clinical trials data

Randomization models are useful in supporting the validity of linear model analyses applied to data from a clinical trial that employed randomization via permuted blocks. Here, a randomization model for clinical trials data with arbitrary randomization methodology is developed, with treatment effect estimators and standard error estimators valid from a randomization perspective. A central limit...

متن کامل

Randomization algorithms for assessing the significance of data mining results

Aalto University, P.O. Box 11000, FI-00076 Aalto www.aalto.fi Author Markus Ojala Name of the doctoral dissertation Randomization Algorithms for Assessing the Significance of Data Mining Results Publisher School of Science Unit Department of Information and Computer Science Series Aalto University publication series DOCTORAL DISSERTATIONS 99/2011 Field of research Computer and Information Scien...

متن کامل

Randomization tests for ERP topographies and whole spatiotemporal data matrices.

In ERP studies, the comparison of topographies (multichannel measurements) or whole spatiotemporal data matrices (multichannel time series of measurements), the classical statistical tests very often cannot be used. It is argued that, for these comparisons, randomization tests are an excellent alternative. It is also argued that the randomization test is superior to another resampling method, t...

متن کامل

Data Space Randomization

Over the past several years, US-CERT advisories, as well as most critical updates from software vendors, have been due to memory corruption vulnerabilities such as buffer overflows, heap overflows, etc. Several techniques have been developed to defend against the exploitation of these vulnerabilities, with the most promising defenses being based on randomization. Two randomization techniques ha...

متن کامل

Quality of Randomization in Clinical Trials Published in Persian Journals of Medical Sciences Indexed in Scopus during 2013-2017

Background and Objectives: Randomization is one of the principles of correct clinical trial. The aim of this study was to determine the quality of randomization in the published articles of clinical trials in the Persian-language journals indexed in Scopus.  ed in Scopus D Methods: In this cross-sectional study, all clinical trials published in Persian journals indexed in Scopus during 2013-2...

متن کامل

ذخیره در منابع من


  با ذخیره ی این منبع در منابع من، دسترسی به آن را برای استفاده های بعدی آسان تر کنید

عنوان ژورنال:

دوره   شماره 

صفحات  -

تاریخ انتشار 2008