Packet vaccine

摘要: In biology,a vaccine is a weakened strain of virus or bacterium that intentionally injected into the body for purpose stimulating antibody production.Inspired by this idea, we propose packet mechanism randomizes address-like strings in payloads to carry out fast exploit detection, vulnerability diagnosis and signature generation. An with randomized jump address behaves like vaccine: it will likely cause an exception vulnerable program's process when attempting hijack control flow,and thereby expose itself. Taking as template, our generator creates set new vaccines probe program, attempt uncover necessary conditions happen. A built upon these shield underlying from further attacks. way, detects fllters exploits black-box fashion,i.e., avoiding expense tracking execution flow. We present design example its application. also describe proof-of-concept implementation evaluation technique using real exploits.