Skip to Main content Skip to Navigation
Conference papers

Simple and Practical Integrity Models for Binaries and Files

Abstract : Software environments typically depend on implicit sharing of binaries where binaries are created, loaded/executed and updated dynamically which we call the binary lifecycle. Windows is one example where many attacks exploit vulnerabilities in the binary lifecycle of software. In this paper, we propose a family of binary integrity models with a simple and easy to use trust model, to help protect against such attacks. We implement a prototype in Windows which protects against a variety of common binary attacks. Our models are easy to use while maintaining existing software compatibility, i.e. work with the implicit binary lifecycle requirements of the software and assumptions on binary sharing. We also propose a conservative extension to protect critical non-binary files.
Complete list of metadatas

Cited literature [9 references]  Display  Hide  Download

https://hal.inria.fr/hal-01416206
Contributor : Hal Ifip <>
Submitted on : Wednesday, December 14, 2016 - 11:03:51 AM
Last modification on : Wednesday, December 14, 2016 - 11:15:46 AM
Document(s) archivé(s) le : Wednesday, March 15, 2017 - 1:27:35 PM

File

337890_1_En_3_Chapter.pdf
Files produced by the author(s)

Licence


Distributed under a Creative Commons Attribution 4.0 International License

Identifiers

Citation

Yongzheng Wu, Roland Yap. Simple and Practical Integrity Models for Binaries and Files. 9th IFIP International Conference on Trust Management (TM), May 2015, Hamburg, Germany. pp.30-46, ⟨10.1007/978-3-319-18491-3_3⟩. ⟨hal-01416206⟩

Share

Metrics

Record views

85

Files downloads

160