Publications (7)
dMVX: Secure and Efficient Multi-Variant Execution in a Distributed Setting
Alexios Voulimeneas, Dokyung Song, Per Larsen +2
Multi-variant execution (MVX) systems amplify the effectiveness of software diversity techniques. The key idea is to run multiple diversified program variants in lockstep while pro…
SoK: Sanitizing for Security
Dokyung Song, Julian Lettner, Prabhu Rajasekaran +4
The C and C++ programming languages are notoriously insecure yet remain indispensable. Developers therefore resort to a multi-pronged approach to find security issues before advers…
Similarity-based matching meets Malware Diversity
Mathias Payer, Stephen Crane, Per Larsen +3
Similarity metrics, e.g., signatures as used by anti-virus products, are the dominant technique to detect if a given binary is malware. The underlying assumption of this approach i…
Multi-Variant Execution of Parallel Programs
Stijn Volckaert, Bjorn De Sutter, Koen De Bosschere +1
Multi-Variant Execution Environments (MVEEs) are a promising technique to protect software against memory corruption attacks. They transparently execute multiple, diversified varia…
PartiSan: Fast and Flexible Sanitization via Run-time Partitioning
Julian Lettner, Dokyung Song, Taemin Park +3
Sanitizers can detect security vulnerabilities in C/C++ code that elude static analysis. Current practice is to continuously fuzz and sanitize internal pre-release builds. Sanitiza…
Control-Flow Integrity: Precision, Security, and Performance
Nathan Burow, Scott A. Carr, Joseph Nash +4
Memory corruption errors in C/C++ programs remain the most common source of security vulnerabilities in today's systems. Control-flow hijacking attacks exploit memory corruption vu…