Reference : MUSTI: Dynamic Prevention of Invalid Object Initialization Attacks

	Document type :	Scientific journals : Article
	Discipline(s) :	Engineering, computing & technology : Computer science
	To cite this reference:	http://hdl.handle.net/10993/42590

Title :	MUSTI: Dynamic Prevention of Invalid Object Initialization Attacks
Language :	English
Author, co-author :	Bartel, Alexandre [University of Luxembourg > Interdisciplinary Centre for Security, Reliability and Trust (SNT) > >]
	Klein, Jacques [University of Luxembourg > Interdisciplinary Centre for Security, Reliability and Trust (SNT) > Computer Science and Communications Research Unit (CSC) >]
	Le Traon, Yves [University of Luxembourg > Interdisciplinary Centre for Security, Reliability and Trust (SNT) > Computer Science and Communications Research Unit (CSC) >]
Publication date :	2019
Journal title :	IEEE Transactions on Information Forensics and Security
Publisher :	Institute of Electrical and Electronics Engineers
Peer reviewed :	Yes (verified by ORBilu)
ISSN :	1556-6013
e-ISSN :	1556-6021
City :	Los Angeles
Country :	United States
Keywords :	[en] java ; security ; vulnerability
Abstract :	[en] Invalid object initialization vulnerabilities have been identified since the 1990’s by a research group at Princeton University. These vulnerabilities are critical since they can be used to totally compromise the security of a Java virtual machine.Recently, such a vulnerability identified as CVE-2017-3289 has been found again in the bytecode verifier of the JVM and affects more than 40 versions of the JVM. In this paper, we present a runtime solution called MUSTIto detect and prevent attacks leveraging this kind of critical vulnerabilities. We optimize MUSTI to have a runtime overhead below 0.5% and a memory overhead below 0.42%. Compared to state-of-the-art, MUSTI is completely automated and does not require to manually annotate the code.
Permalink :	http://hdl.handle.net/10993/42590
Other URL :	https://www.abartel.net/static/p/tifs2019-musti.pdf

	File(s) associated to this reference
	Fulltext file(s): File Commentary Version Size Access Open access tifs2019-musti.pdf Publisher postprint 681.2 kB View/Open

All documents in ORBi^lu are protected by a user license.

 

University of Luxembourg Library |  Feedback |  Legal notices Site Map