A method to eliminate random number misjudgments in multi-variant execution

Xi Rui Cheng; Zheng Zhang; Zijing Liu; PengZhe Zhu

doi:10.1117/12.2659293

28 October 2022 A method to eliminate random number misjudgments in multi-variant execution

Xi Rui Cheng, Zheng Zhang, Zijing Liu, PengZhe Zhu

Proceedings Volume 12453, Third International Conference on Computer Communication and Network Security (CCNS 2022); 124530F (2022) https://doi.org/10.1117/12.2659293
Event: Third International Conference on Computer Communication and Network Security (CCNS 2022), 2022, Hohhot, China

Abstract

Multi-variant Execution (MVX) technology can effectively resist various types of memory leak attacks. Since it was proposed in 2006, after years of development, as an active defense method, it is widely used in cyberspace security. in defense. The multi-variant execution technology distributes the program input to multiple functions through distribution agents, executes executions with different structures in parallel, sets up voting points, and detects whether it is attacked by comparing the output results of the executions of the executions by the monitor. When the multi-variant execution technology is applied to the actual scene, there will be some wrong judgments. For example, the execution body is not attacked, but because the execution bodies are isolated from each other and executed in parallel, random numbers will be generated when the execution body executes the program. These random numbers are included in the output results and are sent to the monitor for voting. Based on the consistency judgment voting, the monitor compares the output results to determine that the execution results are inconsistent, and the misjudgment system is attacked.A multi-variant system is modified by multi-variant execution technological. Such misjudgments are called misjudgment of random numbers. This paper summarizes and analyzes the voting misjudgment caused by random numbers in the multi-variant system, points out the reasons for the misjudgment of random numbers, lists common use cases, summarizes the previous solutions and ideas, and proposes a method to use the file system to synchronize random numbers. Experiments have shown that this method can effectively reduce the misjudgment of random numbers in multi-variant systems and improve the availability of multi-variant systems.

Citation Download Citation

Xi Rui Cheng, Zheng Zhang, Zijing Liu, and PengZhe Zhu "A method to eliminate random number misjudgments in multi-variant execution", Proc. SPIE 12453, Third International Conference on Computer Communication and Network Security (CCNS 2022), 124530F (28 October 2022); https://doi.org/10.1117/12.2659293

ACCESS THE FULL ARTICLE

INSTITUTIONAL
Select your institution to access the SPIE Digital Library.

SELECT YOUR INSTITUTION

PERSONAL
Sign in with your SPIE account to access your personal subscriptions or to use specific features such as save to my library, sign up for alerts, save searches, etc.

PERSONAL SIGN IN

No SPIE Account? Create one

PURCHASE THIS CONTENT

SUBSCRIBE TO DIGITAL LIBRARY

50 downloads per 1-year subscription

Members: $195

Non-members: $335 ADD TO CART

25 downloads per 1 - year subscription

Members: $145

Non-members: $250 ADD TO CART

PURCHASE SINGLE ARTICLE

Includes PDF, HTML & Video, when available

Members: $17.00

Non-members: $21.00 ADD TO CART

PROCEEDINGS
7 PAGES

DOWNLOAD PAPER SAVE TO MY LIBRARY

GET CITATION

RIGHTS & PERMISSIONS

Get copyright permission Get copyright permission on Copyright Marketplace

KEYWORDS

Solid state lighting

Information security

Telecommunications

Information operations

Defense and security

Network security

Binary data

Show All Keywords

Keywords/Phrases

Search In:

Publication Years