Export Citations
Save this search
Please login to be able to save your searches and receive alerts for new content matching your search criteria.
- research-articleApril 2020
X-AFL: a kernel fuzzer combining passive and active fuzzing
EuroSec '20: Proceedings of the 13th European workshop on Systems SecurityApril 2020, Pages 13–18https://doi.org/10.1145/3380786.3391400Vulnerabilities in OS kernel are more severe than those in user space because they allow attackers to access a system with full privileges. Fuzzing is an efficient technique to detect vulnerabilities though little fuzzing efforts aim to kernels. On one ...
- research-articleOctober 2017
IMF: Inferred Model-based Fuzzer
CCS '17: Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications SecurityOctober 2017, Pages 2345–2358https://doi.org/10.1145/3133956.3134103Kernel vulnerabilities are critical in security because they naturally allow attackers to gain unprivileged root access. Although there has been much research on finding kernel vulnerabilities from source code, there are relatively few research on kernel ...
- research-articleOctober 2016
Prefetch Side-Channel Attacks: Bypassing SMAP and Kernel ASLR
CCS '16: Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications SecurityOctober 2016, Pages 368–379https://doi.org/10.1145/2976749.2978356Modern operating systems use hardware support to protect against control-flow hijacking attacks such as code-injection attacks. Typically, write access to executable pages is prevented and kernel mode execution is restricted to kernel code pages only. ...
- research-articleOctober 2016
Jump over ASLR: attacking branch predictors to bypass ASLR
MICRO-49: The 49th Annual IEEE/ACM International Symposium on MicroarchitectureOctober 2016, Article No.: 40, Pages 1–13Address Space Layout Randomization (ASLR) is a widely-used technique that protects systems against a range of attacks. ASLR works by randomizing the offset of key program segments in virtual memory, making it difficult for an attacker to derive the ...