Title
Kimchi: a binary rewriting defense against format string attacks
Abstract
We propose a binary rewriting system called Kimchi that modifies binary programs to protect them from format string attacks in runtime. Kimchi replaces the machine code calling conventional printf with code calling a safer version of printf, safe_printf, that prevents its format string from accessing arguments exceeding the stack frame of the parent function. With the proposed static analysis and binary rewriting method, it can protect binary programs even if they do not use the frame pointer register or link the printf code statically. In addition, it reduces the performance overhead of the patched program by not modifying the calls to printf with the format string argument located in the read-only memory segment, which are not vulnerable to the format string attack.
Year
DOI
Venue
2005
10.1007/11604938_14
WISA
Keywords
Field
DocType
machine code,format string,binary program,parent function,accessing argument,frame pointer register,printf code statically,format string argument,format string attack,conventional printf,static analysis,read only memory
Pointer (computer programming),Computer security,Computer science,Call stack,Binary code,Machine code,Rewriting,scanf format string,String (computer science),Parent function
Conference
Volume
ISSN
ISBN
3786
0302-9743
3-540-31012-6
Citations 
PageRank 
References 
2
0.37
7
Authors
6
Name
Order
Citations
PageRank
Jin Ho You120.37
Seong Chae Seo220.37
Dae Young Kim35210.40
Jun Yong Choi431.73
Sang Jun Lee510329.82
Byung Ki Kim683.64