Collaborate Disseminate
Recently, I came across this article where the author complains about the slow response to exploit protections in the Linux kernel and also highlights that CVE is a poor way to address vulnerabilities. They use the reaction to vulnerabilit… Continue reading Is linux really that insecure? [closed]
Reading into information security, I noticed two branches. Access control when communication with external device by using some type of cryptographic authentication and encryption mechanism and things like control flow integrity. My questi… Continue reading Why do we need security measure likes control flow integrity and buffer overflow guard if we have good access control protocol in place?
In computer security and control-flow integrity (CFI) there are two terms: code-pointer separation (CPS) and code-pointer integrity (CPI), defined as follows:
Code-Pointer Integrity (CPI) is a property of C/C++ programs t… Continue reading Are code-pointer separation (CPS) and code-pointer integrity (CPI) about programming or compilers?
I understand that there exists coarse-grained CFI and fine-grained CFI.
One kind of CFI is implemented by doing a comparison check every time before executing an instruction such as a jump instruction.
The other kind of CFI… Continue reading Precision of Control-Flow Integrity
I found out that many protection mechanisms are used in computer security to ensure control-flow integrity, one of these mechanisms is the Shadow stack:
The principal is very easy it ensure the integrity of return address of… Continue reading How to protect the Shadow Stack?
As Microsoft hardens its defenses with tools such as Control Flow Guard, researchers at Endgame are preparing for the reality of Counterfeit Object-Oriented Programming attacks to move from theoretical to real. Continue reading Attack Method Highlights Weaknesses in Microsoft CFG