We evaluate our tool on popular CTF datasets and real world softwares. Based on these recovered information, our method maintains a new memory model to simulate the life cycle of memory objects and report errors when any accessing policy is violated. The key insight in our work is that memory accessing patterns reveal information for recovering the boundary of memory objects and the accessing policy. The core idea is to recover fine-grained accessing policy between memory access behaviors and memory ranges, and then detect memory access errors based on the policy. In order to overcome these challenges, we propose Memory Access Integrity (MAI), a dynamic method to detect fine-grained memory access errors in off-the-shelf binary executables.
#NETATALK 3 BINARY DOWNLOAD SOFTWARE#
However, searching memory access errors in binary code is a very common scenario in software vulnerability detection and exploitation.
Second, most existing works rely on source code or debugging information to recover memory boundary information, so they cannot be directly applied to detection of memory access errors in binary code. These errors are usually overlooked for a long time since they happen inside one memory block and do not lead to program crash. First, they are not able to tackle fine-grained memory access errors, e.g., data overflow inside one data structure. However, all existing works lack the ability to handle two challenges. Plenty of work have been proposed to detect bugs leading to memory access errors. Particularly, they are hidden deeply in important software systems written in memory unsafe languages like C/C++. As one of the most notorious programming errors, memory access errors still hurt modern software security.
0 kommentar(er)
