3 papers
cs.CR2020
Automated Multi-Architectural Discovery of CFI-Resistant Code Gadgets
Patrick Wollgast, Robert Gawlik, Behrad Garmany +2
Memory corruption vulnerabilities are still a severe threat for software systems. To thwart the exploitation of such vulnerabilities, many different kinds of defenses have been pro…
cs.CR2020
Detile: Fine-Grained Information Leak Detection in Script Engines
Robert Gawlik, Philipp Koppe, Benjamin Kollenda +3
Memory disclosure attacks play an important role in the exploitation of memory corruption vulnerabilities. By analyzing recent research, we observe that bypasses of defensive solut…
cs.CR2020
Static Detection of Uninitialized Stack Variables in Binary Code
Behrad Garmany, Martin Stoffel, Robert Gawlik +1
More than two decades after the first stack smashing attacks, memory corruption vulnerabilities utilizing stack anomalies are still prevalent and play an important role in practice…