HoneyGadget: A Deception Based Approach for Detecting Code Reuse Attacks

Huang, Xin; Yan, Fei; Zhang, Liqiang; Wang, Kai

doi:10.1007/s10796-020-10014-7

Cited by 4 publications

(1 citation statement)

References 26 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Deceptive cyber defense is an important approach to cyber security which is little understood. The paper by Huang et al (2021), entitled "HoneyGadget: A Deception Based Approach for Detecting Code Reuse Attacks," advances the state-of-the-art in deceptive cyber defense, by proposing and evaluating a new deception mechanism that aims at actively detecting ongoing code reuse attacks.…”

Section: The Special Issuementioning

confidence: 99%

Seeking Foundations for the Science of Cyber Security

Yung

Wang

2021

Inf Syst Front

View full text Add to dashboard Cite

Cyber security (or cybersecurity) has become a fundamental issue which deeply affects citizen's lives (including their privacy), the public's economic prosperity, and national security. The high frequency of media reports on highprofile cyber attacks, which cause substantial and, at times, catastrophic damages, highlights that cyberspace is a very fragile and vulnerable ecosystem, and that our understanding of cybersecurity and our capability of defending cyberspace are far from adequate. This is true despite the numerous advancements and breakthroughs in some fields of cybersecurity. One outstanding example is cryptography, which has been built on a firm foundation in Computational Complexity Theory, starting with a number of breakthroughs, e.g. Diffie and Hellman (1976), Rivest et al. (1978), Goldwasser and Micali (1982), and Yao (1982. However, there are many cyber attacks that go beyond the standard cryptographic threats models, such as attacks which can compromise cryptographic private keys by directly stealing memory pages (e.g., Harrison and Xu (2007)), or indirectly exploiting side-channel attacks (e.g., Kocher (1996)). The state-of-the-art is that we are far from being capable of adequately dealing with such attacks in

show abstract

Section: The Special Issuementioning

confidence: 99%