TY - GEN
T1 - Automatic Feature Isolation in Network Protocol Software Implementations
AU - Zhang, Ze
AU - Zhang, Qingzhao
AU - Nguyen, Brandon
AU - Singapuram, Sanjay Sri Vallabh
AU - Morley Mao, Z.
AU - Mahlke, Scott
N1 - Publisher Copyright:
© 2020 ACM.
PY - 2020/11/13
Y1 - 2020/11/13
N2 - Common vulnerabilities and exposures (CVEs) usually exploit design or implementation flaws of specific features in widely used network protocols. Feature isolation as a general protocol customization practice is shown to be highly promising to reduce attack surfaces in these protocols. In this work-in-progress paper, we present two program analysis based methods targeting different feature granularity to automatically identify and isolate unnecessary features in a software protocol implementation. In addition, we develop a semantic reconstruction mechanism to enforce user-specified feature access control policies. Preliminary case studies confirm that our proposed techniques can be effectively applied on real-world protocol vulnerabilities.
AB - Common vulnerabilities and exposures (CVEs) usually exploit design or implementation flaws of specific features in widely used network protocols. Feature isolation as a general protocol customization practice is shown to be highly promising to reduce attack surfaces in these protocols. In this work-in-progress paper, we present two program analysis based methods targeting different feature granularity to automatically identify and isolate unnecessary features in a software protocol implementation. In addition, we develop a semantic reconstruction mechanism to enforce user-specified feature access control policies. Preliminary case studies confirm that our proposed techniques can be effectively applied on real-world protocol vulnerabilities.
KW - network protocol customization
KW - security
KW - static program analysis
UR - https://www.scopus.com/pages/publications/85097707349
UR - https://www.scopus.com/pages/publications/85097707349#tab=citedBy
U2 - 10.1145/3411502.3418425
DO - 10.1145/3411502.3418425
M3 - Conference contribution
AN - SCOPUS:85097707349
T3 - FEAST 2020 - Proceedings of the 2020 ACM Workshop on Forming an Ecosystem Around Software Transformation
SP - 29
EP - 34
BT - FEAST 2020 - Proceedings of the 2020 ACM Workshop on Forming an Ecosystem Around Software Transformation
PB - Association for Computing Machinery, Inc
T2 - 5th ACM Workshop on Forming an Ecosystem Around Software Transformation, FEAST 2020
Y2 - 13 November 2020
ER -