Title :
Monitoring Translation Lookahead Buffers to Detect Code Injection Attacks
Author :
Youngjung Ahn ; Yongsuk Lee ; Jin-Young Choi ; Gyungho Lee ; Dongkyun Ahn
Author_Institution :
Korea Univ., Seoul, South Korea
Abstract :
By identifying memory pages that external I/O operations have modified, a proposed scheme blocks malicious injected code activation, accurately distinguishing an attack from legitimate code injection with negligible performance impact and no changes to the user application.
Keywords :
buffer storage; computer crime; system monitoring; blocks malicious injected code activation; code injection attack detection; external I/O operations; legitimate code injection attack; memory pages identification; translation lookahead buffers monitoring; Decision support systems; Handheld computers; Code injection; TLB; data execution prevention; hackers; invasive software; security;
DOI :
10.1109/MC.2013.228