@inproceedings{911f644a091343b08f80d04e92e91eb4,
title = "Automatic software instrumentation for the detection of non-control-data attacks",
abstract = "To detect intrusions resulting of an attack that corrupted data items used by a program to perform its computation, we propose an approach that automatically instruments programs to control a data-based behavior model during their execution. We build our model by discovering the sets of data the system calls depend on and which constraints these sets must verify at runtime. We have implemented our approach using a static analysis framework called Frama-C and we present the results of experimentations on a vulnerable version of OpenSSH.",
author = "Demay, \{Jonathan Christofer\} and {\'E}ric Totel and Fr{\'e}d{\'e}ric Tronel",
year = "2009",
month = jan,
day = "1",
doi = "10.1007/978-3-642-04342-0\_19",
language = "English",
isbn = "3642043410",
series = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",
publisher = "Springer Verlag",
pages = "348--349",
booktitle = "Recent Advances in Intrusion Detection - 12th International Symposium, RAID 2009, Proceedings",
note = "12th International Symposium on Recent Advances in Intrusion Detection, RAID 2009 ; Conference date: 23-09-2009 Through 25-09-2009",
}