发明名称 |
SYSTEMS, METHODS, AND MEDIA FOR DETECTING RETURN-ORIENTED PROGRAMMING PAYLOADS |
摘要 |
Systems, methods, and media for detecting the presence of return-oriented programming (ROP) payloads are provided, comprising; identifying a potential gadget address space; determining if a piece of the data corresponds to an address of the potential gadget address space; and in response to determining that the piece of the data corresponds to an address of the potential gadget address space: determining whether a plurality of operations, each associated one of a plurality instructions beginning at the address, indicates that an ROP payload is present in the data, and indicating that an ROP payload is present in the data in response to making a determination that a plurality of operations indicates that an ROP payload is present in the data a given number of times. |
申请公布号 |
US2014344932(A1) |
申请公布日期 |
2014.11.20 |
申请号 |
US201214344458 |
申请日期 |
2012.09.17 |
申请人 |
The Trustees of Columbia University in the City of New York |
发明人 |
Polychronakis Michalis;Keromytis Angelos |
分类号 |
G06F21/56 |
主分类号 |
G06F21/56 |
代理机构 |
|
代理人 |
|
主权项 |
1. A system for detecting the presence of a return-oriented programming (ROP) payload in data, comprising:
a hardware processor that:
identifies a potential gadget address space;determines if a piece of the data corresponds to an address of the potential gadget address space; andin response to determining that the piece of the data corresponds to an address of the potential gadget address space:
determines whether a plurality of operations, each associated one of a plurality instructions beginning at the address, indicates that an ROP payload is present in the data, andindicates that an ROP payload is present in the data in response to making a determination that a plurality of operations indicates that an ROP payload is present in the data a given number of times. |
地址 |
New York NY US |