|
Message
From: Nicolas Boulay<nico@s...>
Date: Sun Mar 27 22:19:11 CEST 2005
Subject: [oc] Hardware and OS integration and security
Le dimanche 27 Mars 2005 21:32, claudevms@c... a écrit :
> The papers I have read online about preventing code injection via
> instruction set encryption have taken the initial step of encryption of the
> image on load. This would leave a program image unencrypted on the
> filesystem. I was proposing encryption of the OS and all applications so
> they execute encrypted where the LUT in the hardware would decrypt the
> instructions at the last possible moment and out of sight of users. The
> papers I read also presented information about encrypting interpreted
> languages (e.g. Perl) and found that encryption worked in this environment
> too. This may extend to Java, etc...
>
> As for return to libc I felt that the forced decryption of any buffer
> overflow would result in garbage and forces the application to terminate
> without a return to libc.
>
This could only be if you also encrypt data not only code (string and/or
pointer address).
|
 |
Browse
