Abstract
Use-after-free (UAF) vulnerabilities, are abused by exploiting a dangling pointer that refers to a freed memory, location and then executing arbitrary code. Vulnerabilities are caused by bugs in software programs, particularly large scale programs such as browsers. We had previously proposed HeapRevolver, which prohibits freed memory area from being reused for a certain period. HeapRevolver on Windows uses the number of freed memory areas that are prohibited for reuse as a trigger to release the freed memory area. Alternatively, HeapRevolver uses the number of the freed memory areas as a threshold for releasing freed memory. However, when the size of individual freed memory area is large, HeapRevolver on Windows increases the memory overhead. In this paper, we propose an improved HeapRevolver for Windows considering the size and number of the freed memory areas. The improved HeapRevolver prohibits the reuse of a certain number of freed memory areas at a given time by considering the size and number of freed memory areas as thresholds. Evaluation results demonstrate that the improved HeapRevolver can prevent attacks that exploit UAF vulnerabilities. Particularly, when the size of individual freed memory area is small in a program, HeapRevolver is effective in decreasing the attack success rate.
| Original language | English |
|---|---|
| Title of host publication | Proceedings - 2018 6th International Symposium on Computing and Networking Workshops, CANDARW 2018 |
| Publisher | Institute of Electrical and Electronics Engineers Inc. |
| Pages | 398-404 |
| Number of pages | 7 |
| ISBN (Electronic) | 9781538691847 |
| DOIs | |
| Publication status | Published - Dec 26 2018 |
| Event | 6th International Symposium on Computing and Networking Workshops, CANDARW 2018 - Takayama, Japan Duration: Nov 27 2018 → Nov 30 2018 |
Publication series
| Name | Proceedings - 2018 6th International Symposium on Computing and Networking Workshops, CANDARW 2018 |
|---|
Conference
| Conference | 6th International Symposium on Computing and Networking Workshops, CANDARW 2018 |
|---|---|
| Country | Japan |
| City | Takayama |
| Period | 11/27/18 → 11/30/18 |
Fingerprint
Keywords
- Dangling pointer
- Memory allocation
- Security
- Use-After-Free
ASJC Scopus subject areas
- Computer Networks and Communications
- Hardware and Architecture
- Statistics, Probability and Uncertainty
- Computer Science Applications
Cite this
Mitigating use-after-free attack using library considering size and number of freed memory. / Ban, Yuya; Yamauchi, Toshihiro.
Proceedings - 2018 6th International Symposium on Computing and Networking Workshops, CANDARW 2018. Institute of Electrical and Electronics Engineers Inc., 2018. p. 398-404 8590934 (Proceedings - 2018 6th International Symposium on Computing and Networking Workshops, CANDARW 2018).Research output: Chapter in Book/Report/Conference proceeding › Conference contribution
}
TY - GEN
T1 - Mitigating use-after-free attack using library considering size and number of freed memory
AU - Ban, Yuya
AU - Yamauchi, Toshihiro
PY - 2018/12/26
Y1 - 2018/12/26
N2 - Use-after-free (UAF) vulnerabilities, are abused by exploiting a dangling pointer that refers to a freed memory, location and then executing arbitrary code. Vulnerabilities are caused by bugs in software programs, particularly large scale programs such as browsers. We had previously proposed HeapRevolver, which prohibits freed memory area from being reused for a certain period. HeapRevolver on Windows uses the number of freed memory areas that are prohibited for reuse as a trigger to release the freed memory area. Alternatively, HeapRevolver uses the number of the freed memory areas as a threshold for releasing freed memory. However, when the size of individual freed memory area is large, HeapRevolver on Windows increases the memory overhead. In this paper, we propose an improved HeapRevolver for Windows considering the size and number of the freed memory areas. The improved HeapRevolver prohibits the reuse of a certain number of freed memory areas at a given time by considering the size and number of freed memory areas as thresholds. Evaluation results demonstrate that the improved HeapRevolver can prevent attacks that exploit UAF vulnerabilities. Particularly, when the size of individual freed memory area is small in a program, HeapRevolver is effective in decreasing the attack success rate.
AB - Use-after-free (UAF) vulnerabilities, are abused by exploiting a dangling pointer that refers to a freed memory, location and then executing arbitrary code. Vulnerabilities are caused by bugs in software programs, particularly large scale programs such as browsers. We had previously proposed HeapRevolver, which prohibits freed memory area from being reused for a certain period. HeapRevolver on Windows uses the number of freed memory areas that are prohibited for reuse as a trigger to release the freed memory area. Alternatively, HeapRevolver uses the number of the freed memory areas as a threshold for releasing freed memory. However, when the size of individual freed memory area is large, HeapRevolver on Windows increases the memory overhead. In this paper, we propose an improved HeapRevolver for Windows considering the size and number of the freed memory areas. The improved HeapRevolver prohibits the reuse of a certain number of freed memory areas at a given time by considering the size and number of freed memory areas as thresholds. Evaluation results demonstrate that the improved HeapRevolver can prevent attacks that exploit UAF vulnerabilities. Particularly, when the size of individual freed memory area is small in a program, HeapRevolver is effective in decreasing the attack success rate.
KW - Dangling pointer
KW - Memory allocation
KW - Security
KW - Use-After-Free
UR - http://www.scopus.com/inward/record.url?scp=85061448830&partnerID=8YFLogxK
UR - http://www.scopus.com/inward/citedby.url?scp=85061448830&partnerID=8YFLogxK
U2 - 10.1109/CANDARW.2018.00080
DO - 10.1109/CANDARW.2018.00080
M3 - Conference contribution
AN - SCOPUS:85061448830
T3 - Proceedings - 2018 6th International Symposium on Computing and Networking Workshops, CANDARW 2018
SP - 398
EP - 404
BT - Proceedings - 2018 6th International Symposium on Computing and Networking Workshops, CANDARW 2018
PB - Institute of Electrical and Electronics Engineers Inc.
ER -