Title:	Independence From Obfuscation: A Semantic Framework for Diversity
Authors:	Pucella, Riccardo Schneider, Fred B.
Keywords:	computer science technical report
Issue Date:	30-Jan-2006
Publisher:	Cornell University
Citation:	http://techreports.library.cornell.edu:8081/Dienst/UI/1.0/Display/cul.cis/TR2006-2016
Abstract:	A set of replicas is diverse to the extent that all implement the same functionality but differ in their implementation details. Diverse replicas are less prone to having vulnerabilities in common, because attacks typically depend on memory layout and/or instruction-sequence specifics. Recent work advocates using mechanical means, such as program rewriting, to create such diversity. A correspondence between the specific transformations being employed and the attacks they defend against is often provided, but little has been said about the overall effectiveness of diversity per se in defending against attacks. With this broader goal in mind, we here give a precise characterization of attacks, applicable to viewing diversity as a defense, and also show how mechanically-generated diversity compares to a well-understood defense, strong typing.
URI:	http://hdl.handle.net/1813/5716
Appears in Collections:	Computing and Information Science Technical Reports

Files in This Item: File Description Size Format TR2006-2016.pdf 339.34 kB Adobe PDF View/Open

Items in eCommons are protected by copyright, with all rights reserved, unless otherwise indicated.