Matches in SemOpenAlex for { <https://semopenalex.org/work/W3011058170> ?p ?o ?g. }
- W3011058170 abstract "Complexities that arise from implementation of object-oriented concepts in C++ such as virtual dispatch and dynamic type casting have attracted the attention of attackers and defenders alike. Binary-level defenses are dependent on full and precise recovery of class inheritance tree of a given program. While current solutions focus on recovering single and multiple inheritances from the binary, they are oblivious to virtual inheritance. Conventional wisdom among binary-level defenses is that virtual inheritance is uncommon and/or support for single and multiple inheritances provides implicit support for virtual inheritance. In this paper, we show neither to be true. Specifically, (1) we present an efficient technique to detect virtual inheritance in C++ binaries and show through a study that virtual inheritance can be found in non-negligible number (more than 10% on Linux and 12.5% on Windows) of real-world C++ programs including Mysql and libstdc++. (2) we show that failure to handle virtual inheritance introduces both false positives and false negatives in the hierarchy tree. These false positves and negatives either introduce attack surface when the hierarchy recovered is used to enforce CFI policies, or make the hierarchy difficult to understand when it is needed for program understanding (e.g., during decompilation). (3) We present a solution to recover virtual inheritance from COTS binaries. We recover a maximum of 95% and 95.5% (GCC -O0) and a minimum of 77.5% and 73.8% (Clang -O2) of virtual and intermediate bases respectively in the virtual inheritance tree." @default.
- W3011058170 created "2020-03-23" @default.
- W3011058170 creator A5054450437 @default.
- W3011058170 creator A5059808138 @default.
- W3011058170 date "2020-03-10" @default.
- W3011058170 modified "2023-09-27" @default.
- W3011058170 title "Devil is Virtual: Reversing Virtual Inheritance in C++ Binaries" @default.
- W3011058170 cites W1823377586 @default.
- W3011058170 cites W1964999724 @default.
- W3011058170 cites W2006790656 @default.
- W3011058170 cites W2111760587 @default.
- W3011058170 cites W2144981449 @default.
- W3011058170 cites W2295367909 @default.
- W3011058170 cites W2296346842 @default.
- W3011058170 cites W2547390950 @default.
- W3011058170 cites W2560817611 @default.
- W3011058170 cites W2578771209 @default.
- W3011058170 cites W2599530178 @default.
- W3011058170 cites W2612128870 @default.
- W3011058170 cites W2612138144 @default.
- W3011058170 cites W2735214320 @default.
- W3011058170 cites W2753395445 @default.
- W3011058170 cites W2789370493 @default.
- W3011058170 cites W2791218785 @default.
- W3011058170 cites W2890042297 @default.
- W3011058170 cites W2911958453 @default.
- W3011058170 cites W2914503388 @default.
- W3011058170 cites W2958183263 @default.
- W3011058170 cites W2989990851 @default.
- W3011058170 cites W646354405 @default.
- W3011058170 cites W2404006520 @default.
- W3011058170 hasPublicationYear "2020" @default.
- W3011058170 type Work @default.
- W3011058170 sameAs 3011058170 @default.
- W3011058170 citedByCount "0" @default.
- W3011058170 crossrefType "posted-content" @default.
- W3011058170 hasAuthorship W3011058170A5054450437 @default.
- W3011058170 hasAuthorship W3011058170A5059808138 @default.
- W3011058170 hasConcept C104317684 @default.
- W3011058170 hasConcept C112789634 @default.
- W3011058170 hasConcept C113174947 @default.
- W3011058170 hasConcept C120665830 @default.
- W3011058170 hasConcept C121332964 @default.
- W3011058170 hasConcept C134306372 @default.
- W3011058170 hasConcept C154945302 @default.
- W3011058170 hasConcept C162324750 @default.
- W3011058170 hasConcept C192209626 @default.
- W3011058170 hasConcept C199360897 @default.
- W3011058170 hasConcept C25344961 @default.
- W3011058170 hasConcept C2780902518 @default.
- W3011058170 hasConcept C2781289151 @default.
- W3011058170 hasConcept C31170391 @default.
- W3011058170 hasConcept C33923547 @default.
- W3011058170 hasConcept C34447519 @default.
- W3011058170 hasConcept C41008148 @default.
- W3011058170 hasConcept C48372109 @default.
- W3011058170 hasConcept C54355233 @default.
- W3011058170 hasConcept C64869954 @default.
- W3011058170 hasConcept C73752529 @default.
- W3011058170 hasConcept C80444323 @default.
- W3011058170 hasConcept C86803240 @default.
- W3011058170 hasConcept C94375191 @default.
- W3011058170 hasConceptScore W3011058170C104317684 @default.
- W3011058170 hasConceptScore W3011058170C112789634 @default.
- W3011058170 hasConceptScore W3011058170C113174947 @default.
- W3011058170 hasConceptScore W3011058170C120665830 @default.
- W3011058170 hasConceptScore W3011058170C121332964 @default.
- W3011058170 hasConceptScore W3011058170C134306372 @default.
- W3011058170 hasConceptScore W3011058170C154945302 @default.
- W3011058170 hasConceptScore W3011058170C162324750 @default.
- W3011058170 hasConceptScore W3011058170C192209626 @default.
- W3011058170 hasConceptScore W3011058170C199360897 @default.
- W3011058170 hasConceptScore W3011058170C25344961 @default.
- W3011058170 hasConceptScore W3011058170C2780902518 @default.
- W3011058170 hasConceptScore W3011058170C2781289151 @default.
- W3011058170 hasConceptScore W3011058170C31170391 @default.
- W3011058170 hasConceptScore W3011058170C33923547 @default.
- W3011058170 hasConceptScore W3011058170C34447519 @default.
- W3011058170 hasConceptScore W3011058170C41008148 @default.
- W3011058170 hasConceptScore W3011058170C48372109 @default.
- W3011058170 hasConceptScore W3011058170C54355233 @default.
- W3011058170 hasConceptScore W3011058170C64869954 @default.
- W3011058170 hasConceptScore W3011058170C73752529 @default.
- W3011058170 hasConceptScore W3011058170C80444323 @default.
- W3011058170 hasConceptScore W3011058170C86803240 @default.
- W3011058170 hasConceptScore W3011058170C94375191 @default.
- W3011058170 hasLocation W30110581701 @default.
- W3011058170 hasOpenAccess W3011058170 @default.
- W3011058170 hasPrimaryLocation W30110581701 @default.
- W3011058170 hasRelatedWork W1501456447 @default.
- W3011058170 hasRelatedWork W1572187826 @default.
- W3011058170 hasRelatedWork W1613776191 @default.
- W3011058170 hasRelatedWork W2012604743 @default.
- W3011058170 hasRelatedWork W2057330156 @default.
- W3011058170 hasRelatedWork W2069216738 @default.
- W3011058170 hasRelatedWork W2072419942 @default.
- W3011058170 hasRelatedWork W2078186835 @default.
- W3011058170 hasRelatedWork W2148488259 @default.
- W3011058170 hasRelatedWork W2187929526 @default.
- W3011058170 hasRelatedWork W259709741 @default.