Lockdown: Dynamic Control-Flow Integrity

Applications written in low-level languages without type or memory safety are especially prone to memory corruption. Attackers gain code execution capabilities through such applications despite all currently deployed defenses by exploiting memory corruption vulnerabilities. Control-Flow Integrity (CFI) is a promising defense mechanism that restricts open control-flow transfers to a static set of well-known locations. We present Lockdown, an approach to dynamic CFI that protects legacy, binary-only executables and libraries. Lockdown adaptively learns the control-flow graph of a running process using information from a trusted dynamic loader. The sandbox component of Lockdown restricts interactions between different shared objects to imported and exported functions by enforcing fine-grained CFI checks. Our prototype implementation shows that dynamic CFI results in low performance overhead.Comment: ETH Technical Repor

Flow Control Applications

Flow control has a long history with many successes across a plethora of applications. This report addresses the characteristics of the approaches that are actually used, why they are used, the many approaches that are not used, and why. Analysis indicates ways forward to increase applicability/usefulness, and efficiency of flow control research. Overall, greater and more effective progress in flow control requires utilization of far more detailed information early in the research process regarding application details and requirements

Control Flow Analysis for BioAmbients

This paper presents a static analysis for investigating properties of biological systems specified in BioAmbients. We exploit the control flow analysis to decode the bindings of variables induced by communications and to build a relation of the ambients that can interact with each other. We eventually apply our analysis to an example of gene regulation by positive feedback taken from the literature

Control versus Data Flow in Parallel Database Machines

The execution of a query in a parallel database machine can be controlled in either a control flow way, or in a data flow way. In the former case a single system node controls the entire query execution. In the latter case the processes that execute the query, although possibly running on different nodes of the system, trigger each other. Lately, many database research projects focus on data flow control since it should enhance response times and throughput. The authors study control versus data flow with regard to controlling the execution of database queries. An analytical model is used to compare control and data flow in order to gain insights into the question which mechanism is better under which circumstances. Also, some systems using data flow techniques are described, and the authors investigate to which degree they are really data flow. The results show that for particular types of queries data flow is very attractive, since it reduces the number of control messages and balances these messages over the node

Flow control valve is independent of pressure drop

Remote control of fluid flow in a low-power system is established by a flow control valve with a flapper and nozzle flow control. Constant rates are maintained despite fluctuating pressure across the valve

Fluid flow control with transformation media

We introduce a new concept for the manipulation of fluid flow around three-dimensional bodies. Inspired by transformation optics, the concept is based on a mathematical idea of coordinate transformations and physically implemented with anisotropic porous media permeable to the flow of fluids. In two situations - for an impermeable object placed either in a free-flowing fluid or in a fluid-filled porous medium - we show that the object can be coated with an inhomogeneous, anisotropic permeable medium, such as to preserve the flow that would have existed in the absence of the object. The proposed fluid flow cloak eliminates downstream wake and compensates viscous drag, hinting us at the possibility of novel propulsion techniques.Comment: 4 pages, 7 figure

Object-based Control/Data-flow Analysis

Not only does a clear distinction between control and data flow enhance the readability of models, but it also allows different tools to operate on the two distinct parts of the model. This paper shows how the modelling based on control/data-flow analysis can benefit from an object-based approach. We have developed a translation mechanism that is faithful and gives an extra dimension (hierarchy) to the existing paradigm of control and data flow interacting in a model. Our methodology provides a comprehensible separation of these two parts, which can be used to feed another analysis or synthesis tools, while still being able to reason about both parts through formal methods of verification

Fluid flow control value Patent

Fluid flow control valve for regulating fluids in molecular quantitie