Binary code Randomization for Attack Sensitive Software (BRASS)

Specific mission requirements exist for certain types of critical cyber systems that demand for the software to fail/crash, as soon as possible, when under cyber-attack, rather than to operate in degraded or compromised state. In order to achieve this objective, BRASS offers novel binary code randomization approach that addresses these requirements in two phases: (1) a static phase that transforms a target binary into randomizable form, and (2) a load-time phase that randomizes the binary by reordering its instructions each time it starts. BRASS applies these techniques in order to achieve fast-crash property of guaranteed prompt execution termination in case of successful ROP-based exploitation attacks that cause compromised software to operate in unsafe state. BRASS does not require a source code, and can be applied to a legacy software already deployed by DoD. BRASS provides a proof of functional equivalence for all software variants generated using BRASS binary transformation method. BRASS guarantees accomplishes acceptable size overhead and no degradation in system performance. Each generated variant maintains the same level of robustness as the original program under normal condition. BRASS provides the level of diversification sufficient to guarantee that the attack that succeeded in a single variant, will crash other variants.