Combined Static Analysis and Machine Learning Prediction for Application Debloating

arXiv:2404.00196v1 Announce Type: new
Abstract: Software debloating can effectively thwart certain code reuse attacks by reducing attack surfaces to break gadget chains. Approaches based on static analysis enable a reduced set of functions reachable at a callsite for execution by leveraging static properties of the callgraph. This achieves low runtime overhead, but the function set is conservatively computed, negatively affecting reduction. In contrast, approaches based on machine learning (ML) have much better precision and can sharply reduce function sets, leading …

analysis application arxiv attack attacks attack surfaces can code code reuse cs.cr effectively enable functions gadget low machine machine learning prediction reuse runtime software static analysis