James Just

Followers

Following

Public Views

Uploads

Papers by James Just

Government Analyses of Energy Supply and Demand: A Review

This article reviews and compares the scenarios and results from six major energy studies by the ... more This article reviews and compares the scenarios and results from six major energy studies by the Federal government: Project Independence, the Energy Information Administration's Annual Report - 1977, the National Energy Plan, the National Energy R&D Plan, the Market Oriented Program Planning Study, and the Inexhaustible Energy Resources Planning Study.

Review of Scenarios of Future U.S. Energy Use

Annual Review of Energy, 1979

The future is unknown and largely unknowable. If there is any doubt about this statement, conside... more

Address-Space Randomization for Windows Systems

2006 22nd Annual Computer Security Applications Conference (ACSAC'06), 2006

Address-space randomization (ASR) is a promising solution to defend against memory corruption att... more Address-space randomization (ASR) is a promising solution to defend against memory corruption attacks that have contributed to about three-quarters of US-CERT advisories in the past few years. Several techniques have been proposed for implementing ASR on Linux, but its application to Microsoft Windows, the largest monoculture on the Internet, has not received as much attention. We address this problem in this paper and describe a solution that provides about 15-bits of randomness in the locations of all (code or data) objects. Our randomization is applicable to all processes on a Windows box, including all core system services, as well as applications such as web browsers, office applications, and so on. Our solution has been deployed continuously for about a year on a desktop system used daily, and is robust enough for production use.

Download

Online Signature Generation for Windows Systems

2009 Annual Computer Security Applications Conference, 2009

In this paper, we present a new, light-weight approach for generating filters for blocking buffer... more In this paper, we present a new, light-weight approach for generating filters for blocking buffer overflow attacks on Microsoft Windows systems. It is designed to be deployable as an "always on" component on production systems. To achieve this goal, it avoids expensive and intrusive techniques such as taint-tracking. The online nature of our system enables it to provide protection from a range of memory corruption exploits, including those involving unknown vulnerabilities, or known vulnerabilities but unknown exploits. In contrast, most previous signature generation techniques need to be run in sandboxed environments, and need working exploits to generate signatures. Moreover, our technique overcomes the "gap" problem faced by previous signature generation mechanisms, i.e., when the vulnerable memory region is corrupted between the overflow and the time an attack is detected. Another novel feature of our approach is that it is able to reason about likely lengths of vulnerable buffers, which can lead to more accurate signatures. Our experimental results are very promising, and demonstrate that the approach can generate effective signatures for many synthetic and real-world vulnerabilities.

Download

James Just

Uploads

Papers by James Just

Log In