Control flow hijacking attack detection based on dynamic analysis

Abstract:

The control flow integrity (CFI) strategy can effectively defend against control flow hijacking attacks, but the complex control flow graph construction makes the actual deployment of this strategy very difficult. In order to realize a practical detection method against control flow hijacking attacks, a method based on identifying abnormal program behaviors is proposed to detect control flow hijacking attacks, and a control flow hijacking attack detection system is implemented based on this method. Experiments show that this method can effectively detect various abnormal program behaviors caused by control flow hijacking attacks. The attack detection system works well and can be easily deployed in the actual application environment.