title: ÐÐ°ÑÐ¸ÑÐ° Ð¾Ñ ÑÐºÑÐ¿Ð»ÑÐ°ÑÐ°ÑÐ¸Ð¸ Ð±Ð¸Ð½Ð°ÑÐ½ÑÑ ÑÑÐ·Ð²Ð¸Ð¼Ð¾ÑÑÐµÐ¹ Ð½Ð° Ð¾ÑÐ½Ð¾Ð²Ðµ ÑÐ°Ð¼Ð¾Ð¼Ð¾Ð´Ð¸ÑÐ¸ÑÐ¸ÑÑÑÑÐµÐ³Ð¾ÑÑ ÐºÐ¾Ð´Ð°
title: Ð²ÑÐ¿ÑÑÐºÐ½Ð°Ñ ÐºÐ²Ð°Ð»Ð¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¾Ð½Ð½Ð°Ñ ÑÐ°Ð±Ð¾ÑÐ° Ð±Ð°ÐºÐ°Ð»Ð°Ð²ÑÐ°
titleType: Subtitle
title: Protection against binary exploitation based on self-modifying code
Creators: name: ÐÐ°Ð»Ð¸ÐºÑÐ°Ð½Ð¾Ð², Ð®ÑÐ¸Ð¹
Publisher: name: Ð¡Ð°Ð½ÐºÑ-ÐÐµÑÐµÑÐ±ÑÑÐ³ÑÐºÐ¸Ð¹ Ð¿Ð¾Ð»Ð¸ÑÐµÑÐ½Ð¸ÑÐµÑÐºÐ¸Ð¹ ÑÐ½Ð¸Ð²ÐµÑÑÐ¸ÑÐµÑ ÐÐµÑÑÐ° ÐÐµÐ»Ð¸ÐºÐ¾Ð³Ð¾
Year: 2024
Subjects: Ð·Ð°ÑÐ¸ÑÐ° Ð¾Ñ ÑÐºÑÐ¿Ð»ÑÐ°ÑÐ°ÑÐ¸Ð¸
Ð¿ÐµÑÐµÐ¿Ð¾Ð»Ð½ÐµÐ½Ð¸Ðµ Ð±ÑÑÐµÑÐ°
Ð±Ð¸Ð½Ð°ÑÐ½ÑÐµ Ð¸ÑÐ¿Ð¾Ð»Ð½ÑÐµÐ¼ÑÐµ ÑÐ°Ð¹Ð»Ñ
ÑÐ°Ð¼Ð¾Ð¼Ð¾Ð´Ð¸ÑÐ¸ÑÐ¸ÑÑÑÑÐ¸Ð¹ÑÑ ÐºÐ¾Ð´
exploitation protection
buffer overflow
binary executable files
self-modifying code

description: Ð¦ÐµÐ»ÑÑ ÑÐ°Ð±Ð¾ÑÑ ÑÐ²Ð»ÑÐµÑÑÑ Ð·Ð°ÑÐ¸ÑÐ° Ð±Ð¸Ð½Ð°ÑÐ½ÑÑ Ð¸ÑÐ¿Ð¾Ð»Ð½ÑÐµÐ¼ÑÑ ÑÐ°Ð¹Ð»Ð¾Ð² Ð² ÐÐ¡ Windows Ñ Ð¸ÑÐ¿Ð¾Ð»ÑÐ·Ð¾Ð²Ð°Ð½Ð¸ÐµÐ¼ ÑÐ°Ð¼Ð¾Ð¼Ð¾Ð´Ð¸ÑÐ¸ÑÐ¸ÑÑÑÑÐµÐ³Ð¾ÑÑ ÐºÐ¾Ð´Ð°. ÐÑÐµÐ´Ð¼ÐµÑÐ¾Ð¼ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ñ ÑÐ²Ð»ÑÑÑÑÑ ÑÐ¾Ð²ÑÐµÐ¼ÐµÐ½Ð½ÑÐµ Ð¼ÐµÑÐ¾Ð´Ñ Ð·Ð°ÑÐ¸ÑÑ Ð¾Ñ ÑÐºÑÐ¿Ð»ÑÐ°ÑÐ°ÑÐ¸Ð¸ Ð±Ð¸Ð½Ð°ÑÐ½ÑÑ Ð¸ÑÐ¿Ð¾Ð»Ð½ÑÐµÐ¼ÑÑ ÑÐ°Ð¹Ð»Ð¾Ð² Ð² ÐÐ¡ Windows. ÐÐ°Ð´Ð°ÑÐ¸, ÑÐµÑÐ°ÐµÐ¼ÑÐµ Ð² ÑÐ¾Ð´Ðµ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ñ: 1. ÐÑÐ¾Ð²ÐµÐ´ÐµÐ½Ð¸Ðµ Ð°Ð½Ð°Ð»Ð¸Ð·Ð° Ð±Ð¸Ð½Ð°ÑÐ½ÑÑ ÑÑÐ·Ð²Ð¸Ð¼Ð¾ÑÑÐµÐ¹ ÐÐ Ð¸ ÑÐ¿Ð¾ÑÐ¾Ð±Ð¾Ð² Ð¸Ñ ÑÐºÑÐ¿Ð»ÑÐ°ÑÐ°ÑÐ¸Ð¸ Ð² ÐÐ¡ Windows. 2. ÐÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ðµ ÑÑÑÐµÑÑÐ²ÑÑÑÐ¸Ñ Ð¿Ð¾Ð´ÑÐ¾Ð´Ð¾Ð² Ðº Ð·Ð°ÑÐ¸ÑÐµ Ð¾Ñ ÑÐºÑÐ¿Ð»ÑÐ°ÑÐ°ÑÐ¸Ð¸ Ð±Ð¸Ð½Ð°ÑÐ½ÑÑ ÑÑÐ·Ð²Ð¸Ð¼Ð¾ÑÑÐµÐ¹ Ð¸ ÑÐ¿Ð¾ÑÐ¾Ð±Ð¾Ð² Ð¸Ñ Ð¾Ð±ÑÐ¾Ð´Ð°. 3. Ð Ð°Ð·ÑÐ°Ð±Ð¾ÑÐºÐ° Ð¼ÐµÑÐ¾Ð´Ð° Ð·Ð°ÑÐ¸ÑÑ Ð¾Ñ Ð¿Ð¾Ð¿ÑÑÐ¾Ðº ÑÐºÑÐ¿Ð»ÑÐ°ÑÐ°ÑÐ¸Ð¸ ÑÑÐ·Ð²Ð¸Ð¼Ð¾ÑÑÐµÐ¹ Ð½Ð° Ð¾ÑÐ½Ð¾Ð²Ðµ ÑÐ°Ð¼Ð¾Ð¼Ð¾Ð´Ð¸ÑÐ¸ÑÐ¸ÑÑÑÑÐµÐ³Ð¾ÑÑ ÐºÐ¾Ð´Ð°. 4. Ð ÐµÐ°Ð»Ð¸Ð·Ð°ÑÐ¸Ñ Ð¿ÑÐ¾ÑÐ¾ÑÐ¸Ð¿Ð° Ð¿ÑÐ¾Ð³ÑÐ°Ð¼Ð¼Ð½Ð¾Ð³Ð¾ ÑÑÐµÐ´ÑÑÐ²Ð°, ÑÐµÐ°Ð»Ð¸Ð·ÑÑÑÐµÐ³Ð¾ Ð¿ÑÐµÐ´Ð»Ð¾Ð¶ÐµÐ½Ð½ÑÐ¹ Ð¼ÐµÑÐ¾Ð´ Ð¸ Ð¾ÑÐµÐ½ÐºÐ° ÐµÐ³Ð¾ ÑÑÑÐµÐºÑÐ¸Ð²Ð½Ð¾ÑÑÐ¸. Ð ÑÐ¾Ð´Ðµ ÑÐ°Ð±Ð¾ÑÑ Ð±ÑÐ»Ð¸ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ñ Ð°ÑÑÐ¸ÑÐµÐºÑÑÑÐ° Ð¸ ÑÐµÐ°Ð»Ð¸Ð·Ð°ÑÐ¸Ñ Ð·Ð°ÑÐ¸ÑÐ½ÑÑ Ð¼ÐµÑÐ°Ð½Ð¸Ð·Ð¼Ð¾Ð² Ð·Ð°ÑÐ¸ÑÑ Ð¾Ñ Ð±Ð¸Ð½Ð°ÑÐ½Ð¾Ð¹ ÑÐºÑÐ¿Ð»ÑÐ°ÑÐ°ÑÐ¸Ð¸ Ð² ÐÐ¡ Windows. ÐÑÐ»Ð¸ Ð¿ÑÐ¾Ð°Ð½Ð°Ð»Ð¸Ð·Ð¸ÑÐ¾Ð²Ð°Ð½Ñ ÑÐ¾Ð²ÑÐµÐ¼ÐµÐ½Ð½ÑÐµ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ñ Ð² Ð¾Ð±Ð»Ð°ÑÑÐ¸ Ð¾Ð±ÐµÑÐ¿ÐµÑÐµÐ½Ð¸Ñ Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÐ¸ Ð±Ð¸Ð½Ð°ÑÐ½ÑÑ Ð¸ÑÐ¿Ð¾Ð»Ð½ÑÐµÐ¼ÑÑ ÑÐ°Ð¹Ð»Ð¾Ð² Ð² ÐÐ¡ Windows. Ð ÑÐµÐ·ÑÐ»ÑÑÐ°ÑÐµ ÑÐ°Ð±Ð¾ÑÑ Ð±ÑÐ»Ð¾ ÑÐ°Ð·ÑÐ°Ð±Ð¾ÑÐ°Ð½Ð¾ ÑÑÐµÐ´ÑÑÐ²Ð¾ Ð·Ð°ÑÐ¸ÑÑ Ð¿ÑÐ¾Ð³ÑÐ°Ð¼Ð¼Ð½ÑÑ Ð´ÐµÑÐµÐºÑÐ¾Ð² Ð² Ð±Ð¸Ð½Ð°ÑÐ½ÑÑ Ð¸ÑÐ¿Ð¾Ð»Ð½ÑÐµÐ¼ÑÑ ÑÐ°Ð¹Ð»Ð°Ñ ÐÐ¡ Windows Ð½Ð° Ð¾ÑÐ½Ð¾Ð²Ðµ ÑÐ°Ð¼Ð¾Ð¼Ð¾Ð´Ð¸ÑÐ¸ÑÐ¸ÑÑÑÑÐµÐ³Ð¾ÑÑ ÐºÐ¾Ð´Ð°, Ð±ÑÐ»Ð° Ð¿ÑÐ¾Ð´ÐµÐ¼Ð¾Ð½ÑÑÑÐ¸ÑÐ¾Ð²Ð°Ð½Ð° ÑÑÑÐµÐºÑÐ¸Ð²Ð½Ð¾ÑÑÑ ÑÑÐµÐ´ÑÑÐ²Ð°. ÐÐ¾Ð»ÑÑÐµÐ½Ð½ÑÐµ ÑÐµÐ·ÑÐ»ÑÑÐ°ÑÑ Ð¼Ð¾Ð³ÑÑ Ð±ÑÑÑ Ð¸ÑÐ¿Ð¾Ð»ÑÐ·Ð¾Ð²Ð°Ð½Ñ Ð² ÐºÐ°ÑÐµÑÑÐ²Ðµ Ð¾ÑÐ½Ð¾Ð²Ñ Ð´Ð»Ñ Ð¿ÑÐ¾ÐµÐºÑÐ¸ÑÐ¾Ð²Ð°Ð½Ð¸Ñ ÑÑÐµÐ´ÑÑÐ² Ð·Ð°ÑÐ¸ÑÑ Ð±Ð¸Ð½Ð°ÑÐ½ÑÑ Ð¸ÑÐ¿Ð¾Ð»Ð½ÑÐµÐ¼ÑÑ ÑÐ°Ð¹Ð»Ð¾Ð² Ð½Ð° Ð¾ÑÐ½Ð¾Ð²Ðµ ÑÐ°Ð¼Ð¾Ð¼Ð¾Ð´Ð¸ÑÐ¸ÑÐ¸ÑÑÑÑÐµÐ³Ð¾ÑÑ ÐºÐ¾Ð´Ð°.
description: The purpose of the study is to protect binary executable files in Windows OS based on the self-modified code. The subject of the research is modern methods of protecting against exploitation of binary files and executable files in Windows OS. Problems solved during the study: 1. Conducting an analysis of binary software vulnerabilities and the method of their exploitation in Windows OS. 2. Research of existing approaches to protection against exploitation of binary vulnerabilities and ways to bypass them. 3. Development of a method of protection against defects based on self-modified code. 4. Implementation of a prototype software tool that implements the proposed method and evaluation of its effectiveness. During the work, the architecture was studied, and protective measures were implemented against binary exploitation in Windows OS. Modern research in the field of ensuring the security of binary files and executable files in Windows OS is analyzed. As a result of the work, a tool was developed to protect software defects in binary executable files of the Windows OS based on the self-modified code, and the effectiveness of the tool was demonstrated. The results obtained can be used as a basis for designing means for protecting binary executable files based on self-modified code.