Offensive and Defensive Countermeasure Technology of Return-Oriented Programming

Zixuan Xu; Jingci Zhang; Shang Ai; Chen Liang; Lu Liu; Yuanzhang Li

doi:10.1109/iThings-GreenCom-CPSCom-SmartData-Cybermatics53846.2021.00046

Offensive and Defensive Countermeasure Technology of Return-Oriented Programming

Zixuan Xu
, Jingci Zhang
, Shang Ai^*
, Chen Liang
, Lu Liu
, Yuanzhang Li

^*Corresponding author for this work

Beijing Institute of Technology
Guangzhou University
Beijing Information Science & Technology University

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

1 Citation (Scopus)

Abstract

The problem of buffer overflow in the information system is not threatening, and the system's own defense mechanism can detect and terminate code injection attacks. However, as countermeasures compete with each other, advanced stack overflow attacks have emerged: Return Oriented-Programming (ROP) technology, which has become a hot spot in the field of system security research in recent years. First, this article explains the reason for the existence of this technology and the attack principle. Secondly, it systematically expounds the realization of the return-oriented programming technology at home and abroad in recent years from the common architecture platform, the research of attack load construction, and the research of variants based on ROP attacks. Finally, we summarize the paper.

Original language	English
Title of host publication	Proceedings - IEEE Congress on Cybermatics
Subtitle of host publication	2021 IEEE International Conferences on Internet of Things, iThings 2021, IEEE Green Computing and Communications, GreenCom 2021, IEEE Cyber, Physical and Social Computing, CPSCom 2021 and IEEE Smart Data, SmartData 2021
Editors	James Zheng, Xiao Liu, Tom Hao Luan, Prem Prakash Jayaraman, Haipeng Dai, Karan Mitra, Kai Qin, Rajiv Ranjan, Sheng Wen
Publisher	Institute of Electrical and Electronics Engineers Inc.
Pages	224-228
Number of pages	5
ISBN (Electronic)	9781665417624
DOIs	https://doi.org/10.1109/iThings-GreenCom-CPSCom-SmartData-Cybermatics53846.2021.00046
Publication status	Published - 2021
Event	2021 IEEE Congress on Cybermatics: 14th IEEE International Conferences on Internet of Things, iThings 2021, 17th IEEE International Conference on Green Computing and Communications, GreenCom 2021, 2021 IEEE International Conference on Cyber Physical and Social Computing, CPSCom 2021 and 7th IEEE International Conference on Smart Data, SmartData 2021 - Virtual, Melbourne, Australia Duration: 6 Dec 2021 → 8 Dec 2021

Publication series

Name	Proceedings - IEEE Congress on Cybermatics: 2021 IEEE International Conferences on Internet of Things, iThings 2021, IEEE Green Computing and Communications, GreenCom 2021, IEEE Cyber, Physical and Social Computing, CPSCom 2021 and IEEE Smart Data, SmartData 2021

Conference

Conference	2021 IEEE Congress on Cybermatics: 14th IEEE International Conferences on Internet of Things, iThings 2021, 17th IEEE International Conference on Green Computing and Communications, GreenCom 2021, 2021 IEEE International Conference on Cyber Physical and Social Computing, CPSCom 2021 and 7th IEEE International Conference on Smart Data, SmartData 2021
Country/Territory	Australia
City	Virtual, Melbourne
Period	6/12/21 → 8/12/21

UN SDGs

This output contributes to the following UN Sustainable Development Goals (SDGs)

SDG 7 Affordable and Clean Energy

Keywords

confrontation and defense
development status
return-oriented programming
system security

Access to Document

10.1109/iThings-GreenCom-CPSCom-SmartData-Cybermatics53846.2021.00046

Cite this

Xu, Z., Zhang, J., Ai, S., Liang, C., Liu, L., & Li, Y. (2021). Offensive and Defensive Countermeasure Technology of Return-Oriented Programming. In J. Zheng, X. Liu, T. H. Luan, P. P. Jayaraman, H. Dai, K. Mitra, K. Qin, R. Ranjan, & S. Wen (Eds.), Proceedings - IEEE Congress on Cybermatics: 2021 IEEE International Conferences on Internet of Things, iThings 2021, IEEE Green Computing and Communications, GreenCom 2021, IEEE Cyber, Physical and Social Computing, CPSCom 2021 and IEEE Smart Data, SmartData 2021 (pp. 224-228). (Proceedings - IEEE Congress on Cybermatics: 2021 IEEE International Conferences on Internet of Things, iThings 2021, IEEE Green Computing and Communications, GreenCom 2021, IEEE Cyber, Physical and Social Computing, CPSCom 2021 and IEEE Smart Data, SmartData 2021). Institute of Electrical and Electronics Engineers Inc.. https://doi.org/10.1109/iThings-GreenCom-CPSCom-SmartData-Cybermatics53846.2021.00046

Xu, Zixuan ; Zhang, Jingci ; Ai, Shang et al. / Offensive and Defensive Countermeasure Technology of Return-Oriented Programming. Proceedings - IEEE Congress on Cybermatics: 2021 IEEE International Conferences on Internet of Things, iThings 2021, IEEE Green Computing and Communications, GreenCom 2021, IEEE Cyber, Physical and Social Computing, CPSCom 2021 and IEEE Smart Data, SmartData 2021. editor / James Zheng ; Xiao Liu ; Tom Hao Luan ; Prem Prakash Jayaraman ; Haipeng Dai ; Karan Mitra ; Kai Qin ; Rajiv Ranjan ; Sheng Wen. Institute of Electrical and Electronics Engineers Inc., 2021. pp. 224-228 (Proceedings - IEEE Congress on Cybermatics: 2021 IEEE International Conferences on Internet of Things, iThings 2021, IEEE Green Computing and Communications, GreenCom 2021, IEEE Cyber, Physical and Social Computing, CPSCom 2021 and IEEE Smart Data, SmartData 2021).

@inproceedings{c026246c108349aaa938dba4aa2e2456,

title = "Offensive and Defensive Countermeasure Technology of Return-Oriented Programming",

abstract = "The problem of buffer overflow in the information system is not threatening, and the system's own defense mechanism can detect and terminate code injection attacks. However, as countermeasures compete with each other, advanced stack overflow attacks have emerged: Return Oriented-Programming (ROP) technology, which has become a hot spot in the field of system security research in recent years. First, this article explains the reason for the existence of this technology and the attack principle. Secondly, it systematically expounds the realization of the return-oriented programming technology at home and abroad in recent years from the common architecture platform, the research of attack load construction, and the research of variants based on ROP attacks. Finally, we summarize the paper.",

keywords = "confrontation and defense, development status, return-oriented programming, system security",

author = "Zixuan Xu and Jingci Zhang and Shang Ai and Chen Liang and Lu Liu and Yuanzhang Li",

note = "Publisher Copyright: {\textcopyright} 2021 IEEE.; 2021 IEEE Congress on Cybermatics: 14th IEEE International Conferences on Internet of Things, iThings 2021, 17th IEEE International Conference on Green Computing and Communications, GreenCom 2021, 2021 IEEE International Conference on Cyber Physical and Social Computing, CPSCom 2021 and 7th IEEE International Conference on Smart Data, SmartData 2021 ; Conference date: 06-12-2021 Through 08-12-2021",

year = "2021",

doi = "10.1109/iThings-GreenCom-CPSCom-SmartData-Cybermatics53846.2021.00046",

language = "English",

series = "Proceedings - IEEE Congress on Cybermatics: 2021 IEEE International Conferences on Internet of Things, iThings 2021, IEEE Green Computing and Communications, GreenCom 2021, IEEE Cyber, Physical and Social Computing, CPSCom 2021 and IEEE Smart Data, SmartData 2021",

publisher = "Institute of Electrical and Electronics Engineers Inc.",

pages = "224--228",

editor = "James Zheng and Xiao Liu and Luan, \{Tom Hao\} and Jayaraman, \{Prem Prakash\} and Haipeng Dai and Karan Mitra and Kai Qin and Rajiv Ranjan and Sheng Wen",

booktitle = "Proceedings - IEEE Congress on Cybermatics",

address = "United States",

}

Xu, Z, Zhang, J, Ai, S, Liang, C , Liu, L & Li, Y 2021, Offensive and Defensive Countermeasure Technology of Return-Oriented Programming. in J Zheng, X Liu, TH Luan, PP Jayaraman, H Dai, K Mitra, K Qin, R Ranjan & S Wen (eds), Proceedings - IEEE Congress on Cybermatics: 2021 IEEE International Conferences on Internet of Things, iThings 2021, IEEE Green Computing and Communications, GreenCom 2021, IEEE Cyber, Physical and Social Computing, CPSCom 2021 and IEEE Smart Data, SmartData 2021. Proceedings - IEEE Congress on Cybermatics: 2021 IEEE International Conferences on Internet of Things, iThings 2021, IEEE Green Computing and Communications, GreenCom 2021, IEEE Cyber, Physical and Social Computing, CPSCom 2021 and IEEE Smart Data, SmartData 2021, Institute of Electrical and Electronics Engineers Inc., pp. 224-228, 2021 IEEE Congress on Cybermatics: 14th IEEE International Conferences on Internet of Things, iThings 2021, 17th IEEE International Conference on Green Computing and Communications, GreenCom 2021, 2021 IEEE International Conference on Cyber Physical and Social Computing, CPSCom 2021 and 7th IEEE International Conference on Smart Data, SmartData 2021, Virtual, Melbourne, Australia, 6/12/21. https://doi.org/10.1109/iThings-GreenCom-CPSCom-SmartData-Cybermatics53846.2021.00046

Offensive and Defensive Countermeasure Technology of Return-Oriented Programming. / Xu, Zixuan; Zhang, Jingci; Ai, Shang et al.
Proceedings - IEEE Congress on Cybermatics: 2021 IEEE International Conferences on Internet of Things, iThings 2021, IEEE Green Computing and Communications, GreenCom 2021, IEEE Cyber, Physical and Social Computing, CPSCom 2021 and IEEE Smart Data, SmartData 2021. ed. / James Zheng; Xiao Liu; Tom Hao Luan; Prem Prakash Jayaraman; Haipeng Dai; Karan Mitra; Kai Qin; Rajiv Ranjan; Sheng Wen. Institute of Electrical and Electronics Engineers Inc., 2021. p. 224-228 (Proceedings - IEEE Congress on Cybermatics: 2021 IEEE International Conferences on Internet of Things, iThings 2021, IEEE Green Computing and Communications, GreenCom 2021, IEEE Cyber, Physical and Social Computing, CPSCom 2021 and IEEE Smart Data, SmartData 2021).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - Offensive and Defensive Countermeasure Technology of Return-Oriented Programming

AU - Xu, Zixuan

AU - Zhang, Jingci

AU - Ai, Shang

AU - Liang, Chen

AU - Liu, Lu

AU - Li, Yuanzhang

PY - 2021

Y1 - 2021

N2 - The problem of buffer overflow in the information system is not threatening, and the system's own defense mechanism can detect and terminate code injection attacks. However, as countermeasures compete with each other, advanced stack overflow attacks have emerged: Return Oriented-Programming (ROP) technology, which has become a hot spot in the field of system security research in recent years. First, this article explains the reason for the existence of this technology and the attack principle. Secondly, it systematically expounds the realization of the return-oriented programming technology at home and abroad in recent years from the common architecture platform, the research of attack load construction, and the research of variants based on ROP attacks. Finally, we summarize the paper.

AB - The problem of buffer overflow in the information system is not threatening, and the system's own defense mechanism can detect and terminate code injection attacks. However, as countermeasures compete with each other, advanced stack overflow attacks have emerged: Return Oriented-Programming (ROP) technology, which has become a hot spot in the field of system security research in recent years. First, this article explains the reason for the existence of this technology and the attack principle. Secondly, it systematically expounds the realization of the return-oriented programming technology at home and abroad in recent years from the common architecture platform, the research of attack load construction, and the research of variants based on ROP attacks. Finally, we summarize the paper.

KW - confrontation and defense

KW - development status

KW - return-oriented programming

KW - system security

UR - https://www.scopus.com/pages/publications/85127441987

U2 - 10.1109/iThings-GreenCom-CPSCom-SmartData-Cybermatics53846.2021.00046

DO - 10.1109/iThings-GreenCom-CPSCom-SmartData-Cybermatics53846.2021.00046

M3 - Conference contribution

AN - SCOPUS:85127441987

T3 - Proceedings - IEEE Congress on Cybermatics: 2021 IEEE International Conferences on Internet of Things, iThings 2021, IEEE Green Computing and Communications, GreenCom 2021, IEEE Cyber, Physical and Social Computing, CPSCom 2021 and IEEE Smart Data, SmartData 2021

SP - 224

EP - 228

BT - Proceedings - IEEE Congress on Cybermatics

A2 - Zheng, James

A2 - Liu, Xiao

A2 - Luan, Tom Hao

A2 - Jayaraman, Prem Prakash

A2 - Dai, Haipeng

A2 - Mitra, Karan

A2 - Qin, Kai

A2 - Ranjan, Rajiv

A2 - Wen, Sheng

PB - Institute of Electrical and Electronics Engineers Inc.

T2 - 2021 IEEE Congress on Cybermatics: 14th IEEE International Conferences on Internet of Things, iThings 2021, 17th IEEE International Conference on Green Computing and Communications, GreenCom 2021, 2021 IEEE International Conference on Cyber Physical and Social Computing, CPSCom 2021 and 7th IEEE International Conference on Smart Data, SmartData 2021

Y2 - 6 December 2021 through 8 December 2021

ER -

Xu Z, Zhang J, Ai S, Liang C , Liu L , Li Y. Offensive and Defensive Countermeasure Technology of Return-Oriented Programming. In Zheng J, Liu X, Luan TH, Jayaraman PP, Dai H, Mitra K, Qin K, Ranjan R, Wen S, editors, Proceedings - IEEE Congress on Cybermatics: 2021 IEEE International Conferences on Internet of Things, iThings 2021, IEEE Green Computing and Communications, GreenCom 2021, IEEE Cyber, Physical and Social Computing, CPSCom 2021 and IEEE Smart Data, SmartData 2021. Institute of Electrical and Electronics Engineers Inc. 2021. p. 224-228. (Proceedings - IEEE Congress on Cybermatics: 2021 IEEE International Conferences on Internet of Things, iThings 2021, IEEE Green Computing and Communications, GreenCom 2021, IEEE Cyber, Physical and Social Computing, CPSCom 2021 and IEEE Smart Data, SmartData 2021). doi: 10.1109/iThings-GreenCom-CPSCom-SmartData-Cybermatics53846.2021.00046

Offensive and Defensive Countermeasure Technology of Return-Oriented Programming

Abstract

Publication series

Conference

UN SDGs

Keywords

Access to Document

Other files and links

Fingerprint

Cite this