New exploitation techniques and defenses for DOP attacks

guest · Mar 8, 2019

New exploitation techniques and defenses for DOP attacks
March 7, 2019
https://techxplore.com/news/2019-03-exploitation-techniques-defenses-dop.html

"The data-oriented programming (DOP) attack, which for the first time allows one to steal private OpenSSL keys from a server without being detected by state-of-the-art security checks, first came out in 2016," Daphne Yao, one of the researchers who carried out the study, told TechXplore.

"DOP attacks appear to be quite invincible. Our entire team was intrigued and wanted to find out what kind of detection could stop DOP."
"The danger of data-oriented attacks, including DOP and the newer block-oriented programming (BOP), is that they do not tamper with the control flow of a victim program," Yao explained. "Thus, it evades the popular control-flow integrity (CFI) detection [...]"
Click to expand...

Exploitation Techniques and Defenses for Data-Oriented Attacks

Log in or Sign up

New exploitation techniques and defenses for DOP attacks

guest Guest

Log in or Sign up

New exploitation techniques and defenses for DOP attacks

guest Guest

Useful Searches