APPARATUS AND METHOD FOR DEFENSING OF CODE REUSE ATTACK

摘要

A code reuse attack defense apparatus and method are disclosed. A method of protecting a code reuse attack performed by a code reuse attack defense apparatus according to the present invention includes the steps of selecting a monitoring core among idle cores of a multicore system, loading a CFI monitoring unit to the monitoring core, The CFI monitoring unit extracting a CPU instruction of a monitored core on which the monitored program is executed using the control data; extracting a normal execution flow of the monitored program from the CFI monitoring unit; Determining whether the CFI monitoring unit is in violation of a control flow policy of the CPU instruction based on the normal execution flow, and controlling the execution of the monitored core based on whether the CFI monitoring unit violates the control flow policy , Thereby protecting the code reuse attack It includes.