Questions tagged [cfi]

A term for computer security techniques which prevent a wide variety of malware attacks from redirecting the flow of execution of a program

Filter by
Sorted by
Tagged with
1
vote
0answers
53 views

Are code-pointer separation (CPS) and code-pointer integrity (CPI) about programming or compilers?

In computer security and control-flow integrity (CFI) there are two terms: code-pointer separation (CPS) and code-pointer integrity (CPI), defined as follows: Code-Pointer Integrity (CPI) is a ...
0
votes
0answers
39 views

Threat Model of -fstack-protector

In -fstack-protector the compiler skip instrumenting certain functions which are not deemed to be unsafe (using heurisitics such as filtering out functions not allocating stack buffers etc). What ...
0
votes
0answers
42 views

Precision of Control-Flow Integrity

I understand that there exists coarse-grained CFI and fine-grained CFI. One kind of CFI is implemented by doing a comparison check every time before executing an instruction such as a jump ...
1
vote
2answers
301 views

How to protect the Shadow Stack?

I found out that many protection mechanisms are used in computer security to ensure control-flow integrity, one of these mechanisms is the Shadow stack: The principal is very easy it ensure the ...
0
votes
0answers
45 views

How can I build a program with shadow stacks?

CLANG has CFI and Microsoft has CFG but is there any readily available way to build a binary with a shadow stack? I would like to try it out but could not find anything.