Questions tagged [cfi]

A term for computer security techniques which prevent a wide variety of malware attacks from redirecting the flow of execution of a program

Filter by
Sorted by
Tagged with
1
vote
1answer
102 views

Why do we need security measure likes control flow integrity and buffer overflow guard if we have good access control protocol in place?

Reading into information security, I noticed two branches. Access control when communication with external device by using some type of cryptographic authentication and encryption mechanism and things ...
1
vote
0answers
98 views

Are code-pointer separation (CPS) and code-pointer integrity (CPI) about programming or compilers?

In computer security and control-flow integrity (CFI) there are two terms: code-pointer separation (CPS) and code-pointer integrity (CPI), defined as follows: Code-Pointer Integrity (CPI) is a ...
1
vote
2answers
482 views

How to protect the Shadow Stack?

I found out that many protection mechanisms are used in computer security to ensure control-flow integrity, one of these mechanisms is the Shadow stack: The principal is very easy it ensure the ...
0
votes
0answers
50 views

How can I build a program with shadow stacks?

CLANG has CFI and Microsoft has CFG but is there any readily available way to build a binary with a shadow stack? I would like to try it out but could not find anything.