USENIX Security 23.pdf

yoochan-pspray.pdf
Preview of USENIX Security 23
🔗 Source: compsec.snu.ac.kr
📊 Size: 1.09 MB
📄 Pages: 19 pages
⬇️ Downloads: 139

Summary

PSPRAY is a timing side-channel based Linux kernel heap exploitation technique that increases the success probability of exploitation. It uses a timing side-channel to indirectly learn the allocation status of the slab, allowing attackers to infer a partial allocation status and augment heap exploitation reliability. Evaluation results show that PSPRAY significantly improves the success rate of 10 real-world vulnerabilities from 56.1% to 97.92% on average. A new defense mechanism is introduced to mitigate the threat of PSPRAY, which obscures the timing when an empty freelist is used for allocation, reverting the success rate of attacks back to what it was before using PSPRAY.

Description

PSPRAY is a timing side-channel based Linux kernel heap exploitation technique that increases the success probability of exploitation.

Technical Information

  • File Format: PDF
  • File Size: 1.09 MB
  • Pages: 19
  • Language: EN
  • Total Downloads: 139
  • Last Updated: 4 hours ago

Document Overview

This PDF document about USENIX Security 23 provides comprehensive information and guidance. Whether you're a beginner or advanced user, this resource offers valuable insights into USENIX Security 23.

Related Topics

If you're interested in USENIX Security 23, you might also want to explore:

Download USENIX Security 23 eBooks for free and learn more about USENIX Security 23. These books contain exercises and tutorials to improve your practical skills, at all levels!

Not satisfied with this document? We have related documents to USENIX Security 23, try searching with similar keywords: USENIX Security 23, Domain Name Server Comparison Usenix, usenix, Usenix 2011, Usenix Nsdi, Usenix Official Site, [Usenix] When Governments Hack Opponents: A Look at Actors and Technology, CAFL [USENIX Sec 21]

You can download PDF versions of the user's guide, manuals and ebooks about USENIX Security 23, you can also find and download for free A free online manual (notices) with beginner and intermediate, Downloads Documentation, You can download PDF files (or DOC and PPT) about USENIX Security 23 for free, but please respect copyrighted ebooks.