A Generic Attack on Checksumming-Based Software Tamper Resistance

Authors:
Glenn Wurster;P. C. van Oorschot;Anil Somayaji
Affiliations:
Carleton University, Canada;Carleton University, Canada;Carleton University, Canada
Venue:
SP '05 Proceedings of the 2005 IEEE Symposium on Security and Privacy
Year:
2005

Citing 0
Cited 25

Hardware-Assisted Circumvention of Self-Hashing Software Tamper Resistance

IEEE Transactions on Dependable and Secure Computing
Pioneer: verifying code integrity and enforcing untampered code execution on legacy systems

Proceedings of the twentieth ACM symposium on Operating systems principles
Hybrid static-dynamic attacks against software protection mechanisms

Proceedings of the 5th ACM workshop on Digital rights management
IMPRES: integrated monitoring for processor reliability and security

Proceedings of the 43rd annual Design Automation Conference
Proteus: virtualization for diversified tamper-resistance

Proceedings of the ACM workshop on Digital rights management
Protecting online games against cheating

NetGames '06 Proceedings of 5th ACM SIGCOMM workshop on Network and system support for games
Towards integral binary execution: implementing oblivious hashing using overlapped instruction encodings

Proceedings of the 9th workshop on Multimedia & security
SecVisor: a tiny hypervisor to provide lifetime kernel code integrity for commodity OSes

Proceedings of twenty-first ACM SIGOPS symposium on Operating systems principles
Virtual machine-provided context sensitive page mappings

Proceedings of the fourth ACM SIGPLAN/SIGOPS international conference on Virtual execution environments
Remote Attestation on Legacy Operating Systems With Trusted Platform Modules

Electronic Notes in Theoretical Computer Science (ENTCS)
Enhanced Security by OS-Oriented Encapsulation in TPM-Enabled DRM

Information Security and Cryptology
Remote attestation on legacy operating systems with trusted platform modules

Science of Computer Programming
A security-enhanced remote platform integrity attestation scheme

WiCOM'09 Proceedings of the 5th International Conference on Wireless communications, networking and mobile computing
Run-time randomization to mitigate tampering

IWSEC'07 Proceedings of the Security 2nd international conference on Advances in information and computer security
Conqueror: tamper-proof code execution on legacy systems

DIMVA'10 Proceedings of the 7th international conference on Detection of intrusions and malware, and vulnerability assessment
A secure and robust approach to software tamper resistance

IH'10 Proceedings of the 12th international conference on Information hiding
A software-based root-of-trust primitive on multicore platforms

Proceedings of the 6th ACM Symposium on Information, Computer and Communications Security
Trust extension as a mechanism for secure code execution on commodity computers

Trust extension as a mechanism for secure code execution on commodity computers
An attack on SMC-based software protection

ICICS'06 Proceedings of the 8th international conference on Information and Communications Security
Remote software-based attestation for wireless sensors

ESAS'05 Proceedings of the Second European conference on Security and Privacy in Ad-Hoc and Sensor Networks
Performance study of a compiler/hardware approach to embedded systems security

ISI'05 Proceedings of the 2005 IEEE international conference on Intelligence and Security Informatics
Scalable integrity-guaranteed AJAX

APWeb'12 Proceedings of the 14th Asia-Pacific international conference on Web Technologies and Applications
Software protection for dynamically-generated code

PPREW '13 Proceedings of the 2nd ACM SIGPLAN Program Protection and Reverse Engineering Workshop
Binary-code obfuscations in prevalent packer tools

ACM Computing Surveys (CSUR)
SobTrA: a software-based trust anchor for ARM cortex application processors

Proceedings of the 4th ACM conference on Data and application security and privacy

Quantified Score

Hi-index	0.00

Visualization

Abstract

Host-based intrusion detection systems attempt to identify attacks by discovering program behaviors that deviate from expected patterns. While the idea of performing behavior validation on-the-fly and terminating errant tasks as soon as a violation is ...