On the Effectiveness of Metamorphic Shield

Report
Authors:NguyenTuong, Anh, Department of Computer ScienceUniversity of Virginia Wang, Andrew, Department of Computer ScienceUniversity of Virginia Hiser, Jason, Department of Computer ScienceUniversity of Virginia Knight, John, Department of Computer ScienceUniversity of Virginia Davidson, Jack, Department of Computer ScienceUniversity of Virginia
Abstract:

In this paper we analyze the effectiveness of dynamic artificial diversity, i.e., artificial diversity in which the subject of the diversity is re-randomized periodically. We refer to a mechanism that implements dynamic diversity as a Metamorphic Shield since this mechanism applies metamorphosis to thesystem's surface to try to shield the system from certain attacks. Contrary to intuition, our analysis reveals that dynamic diversity provides limited benefit except in special cases. In particular, it offers benefit for attacks that seek to leak information. We present a case study of the use of dynamic diversity applied to Instruction Set Randomization that is subject to an incremental attack on the key.
Note: Abstract extracted from PDF text

Rights:
All rights reserved (no additional license for public reuse)
Language:
English
Source Citation:

NguyenTuong, Anh, Andrew Wang, Jason Hiser, John Knight, and Jack Davidson. "On the Effectiveness of Metamorphic Shield." University of Virginia Dept. of Computer Science Tech Report (2010).

Publisher:
University of Virginia, Department of Computer Science
Published Date:
2010
Persistent Link:
https://doi.org/10.18130/V3XF4P