On the Effectiveness of Metamorphic ShieldReport
In this paper we analyze the effectiveness of dynamic artificial diversity, i.e., artificial diversity in which the subject of the diversity is re-randomized periodically. We refer to a mechanism that implements dynamic diversity as a Metamorphic Shield since this mechanism applies metamorphosis to thesystem's surface to try to shield the system from certain attacks. Contrary to intuition, our analysis reveals that dynamic diversity provides limited benefit except in special cases. In particular, it offers benefit for attacks that seek to leak information. We present a case study of the use of dynamic diversity applied to Instruction Set Randomization that is subject to an incremental attack on the key.
Note: Abstract extracted from PDF text
All rights reserved (no additional license for public reuse)
NguyenTuong, Anh, Andrew Wang, Jason Hiser, John Knight, and Jack Davidson. "On the Effectiveness of Metamorphic Shield." University of Virginia Dept. of Computer Science Tech Report (2010).
University of Virginia, Department of Computer Science