The undefined quest for full memory safety

Thesis: M. Eng., Massachusetts Institute of Technology, Department of Electrical Engineering and Computer Science, 2018.

Bibliographic Details
Main Author: Gil, Ronald, M. Eng. Massachusetts Institute of Technology
Other Authors: Howard E. Shrobe and Hamed Okhravi.
Format: Thesis
Language:eng
Published: Massachusetts Institute of Technology 2018
Subjects:
Online Access:http://hdl.handle.net/1721.1/119551
_version_ 1811088252517482496
author Gil, Ronald, M. Eng. Massachusetts Institute of Technology
author2 Howard E. Shrobe and Hamed Okhravi.
author_facet Howard E. Shrobe and Hamed Okhravi.
Gil, Ronald, M. Eng. Massachusetts Institute of Technology
author_sort Gil, Ronald, M. Eng. Massachusetts Institute of Technology
collection MIT
description Thesis: M. Eng., Massachusetts Institute of Technology, Department of Electrical Engineering and Computer Science, 2018.
first_indexed 2024-09-23T13:59:11Z
format Thesis
id mit-1721.1/119551
institution Massachusetts Institute of Technology
language eng
last_indexed 2024-09-23T13:59:11Z
publishDate 2018
publisher Massachusetts Institute of Technology
record_format dspace
spelling mit-1721.1/1195512019-04-11T11:38:20Z The undefined quest for full memory safety Gil, Ronald, M. Eng. Massachusetts Institute of Technology Howard E. Shrobe and Hamed Okhravi. Massachusetts Institute of Technology. Department of Electrical Engineering and Computer Science. Massachusetts Institute of Technology. Department of Electrical Engineering and Computer Science. Electrical Engineering and Computer Science. Thesis: M. Eng., Massachusetts Institute of Technology, Department of Electrical Engineering and Computer Science, 2018. This electronic version was submitted by the student author. The certified thesis is available in the Institute Archives and Special Collections. Cataloged from student-submitted PDF version of thesis. Includes bibliographical references (pages 59-64). In this thesis, we explore full memory safety and the various intricacies involved. We analyze existing memory safety techniques in both hardware and software and their many different goals. This task involves determining the limits of the protections guaranteed by these different protection systems, regardless of whether they were explicitly or implicitly stated. It is demonstrated that the common software technique of protecting only allocation bounds does not provide nearly enough of a barrier for attackers. Then, we go beyond particular schemes and examine the limitations of languages, C in particular. We discover many corner cases and ambiguities that prevent even the best possible protection system from providing full memory safety in the context of the C language specification. We also collect some results for the prevalence of these issues, present approaches to further analyze them, and consider how they might extend into other languages or systems. by Ronald Gil. M. Eng. 2018-12-11T20:39:47Z 2018-12-11T20:39:47Z 2018 2018 Thesis http://hdl.handle.net/1721.1/119551 1076273115 eng MIT theses are protected by copyright. They may be viewed, downloaded, or printed from this source but further reproduction or distribution in any format is prohibited without written permission. http://dspace.mit.edu/handle/1721.1/7582 64 pages application/pdf Massachusetts Institute of Technology
spellingShingle Electrical Engineering and Computer Science.
Gil, Ronald, M. Eng. Massachusetts Institute of Technology
The undefined quest for full memory safety
title The undefined quest for full memory safety
title_full The undefined quest for full memory safety
title_fullStr The undefined quest for full memory safety
title_full_unstemmed The undefined quest for full memory safety
title_short The undefined quest for full memory safety
title_sort undefined quest for full memory safety
topic Electrical Engineering and Computer Science.
url http://hdl.handle.net/1721.1/119551
work_keys_str_mv AT gilronaldmengmassachusettsinstituteoftechnology theundefinedquestforfullmemorysafety
AT gilronaldmengmassachusettsinstituteoftechnology undefinedquestforfullmemorysafety