Describing Data Format Exploits Using Bitstream Segment Graphs

Michael Hartle; D. Schumann; A. Botchak; E. Tews; M. Mühlhäuser

doi:10.1109/ICCGI.2008.21

Describing Data Format Exploits Using Bitstream Segment Graphs

Michael Hartle, D. Schumann, A. Botchak, E. Tews, M. Mühlhäuser

Computer Science

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

1 Citation (Scopus)

Abstract

Exploits based on data processing bugs are delivered through crafted data that seems to follow a data format, yet is altered in some way to trigger a specific bug during processing, eg. in order to execute contained malicious code. Decomposing crafted data according to the purported data format and the function of its components that are not format-compliant is a step towards understanding the delivery mechanism of an exploit and fixing the vulnerable application. This paper demonstrates the use of bitstream segment graphs for describing the structure of exploits on the example of the TIFF Jailbreak exploit for the Apple iPhone and iPod Touch with firmware 1.1.1.

Original language	English
Title of host publication	The Third International Multi-Conference on Computing in the Global Information Technology, 2008. ICCGI '08.
Pages	119-124
Number of pages	6
DOIs	https://doi.org/10.1109/ICCGI.2008.21
Publication status	Published - 2008

Access to Document

10.1109/ICCGI.2008.21

https://www.datenzone.de/blog/wp-content/uploads/2016/06/DESCRIBING-DATA-FORMAT-EXPLOITS-USING-BITSTREAM-SEGMENT-GRAPHS.pdf

Cite this

@inproceedings{dc9feeb27dfb4a3bb570aa0c20a896e3,

title = "Describing Data Format Exploits Using Bitstream Segment Graphs",

abstract = "Exploits based on data processing bugs are delivered through crafted data that seems to follow a data format, yet is altered in some way to trigger a specific bug during processing, eg. in order to execute contained malicious code. Decomposing crafted data according to the purported data format and the function of its components that are not format-compliant is a step towards understanding the delivery mechanism of an exploit and fixing the vulnerable application. This paper demonstrates the use of bitstream segment graphs for describing the structure of exploits on the example of the TIFF Jailbreak exploit for the Apple iPhone and iPod Touch with firmware 1.1.1.",

author = "Michael Hartle and D. Schumann and A. Botchak and E. Tews and M. M{\"u}hlh{\"a}user",

year = "2008",

doi = "10.1109/ICCGI.2008.21",

language = "English",

pages = "119--124",

booktitle = "The Third International Multi-Conference on Computing in the Global Information Technology, 2008. ICCGI '08.",

}

TY - GEN

T1 - Describing Data Format Exploits Using Bitstream Segment Graphs

AU - Hartle, Michael

AU - Schumann, D.

AU - Botchak, A.

AU - Tews, E.

AU - Mühlhäuser, M.

PY - 2008

Y1 - 2008

N2 - Exploits based on data processing bugs are delivered through crafted data that seems to follow a data format, yet is altered in some way to trigger a specific bug during processing, eg. in order to execute contained malicious code. Decomposing crafted data according to the purported data format and the function of its components that are not format-compliant is a step towards understanding the delivery mechanism of an exploit and fixing the vulnerable application. This paper demonstrates the use of bitstream segment graphs for describing the structure of exploits on the example of the TIFF Jailbreak exploit for the Apple iPhone and iPod Touch with firmware 1.1.1.

AB - Exploits based on data processing bugs are delivered through crafted data that seems to follow a data format, yet is altered in some way to trigger a specific bug during processing, eg. in order to execute contained malicious code. Decomposing crafted data according to the purported data format and the function of its components that are not format-compliant is a step towards understanding the delivery mechanism of an exploit and fixing the vulnerable application. This paper demonstrates the use of bitstream segment graphs for describing the structure of exploits on the example of the TIFF Jailbreak exploit for the Apple iPhone and iPod Touch with firmware 1.1.1.

U2 - 10.1109/ICCGI.2008.21

DO - 10.1109/ICCGI.2008.21

M3 - Conference contribution

SP - 119

EP - 124

BT - The Third International Multi-Conference on Computing in the Global Information Technology, 2008. ICCGI '08.

ER -

Describing Data Format Exploits Using Bitstream Segment Graphs

Abstract

Access to Document

Fingerprint

Cite this