Research Paper

Question 1

Dynamic Loading accomplishes all of the following EXCEPT:

a. Enables modularity and reuse
b. Prevents escalation of privileges by blocking the copying of read-only executables to memory locations allowing read-write access
c. Reduces memory footprint by sharing code pages of libraries and executables
d. Simplifies update procedures by eliminating need to recompile executables when a library is updated

Answer 1

Correct Answer: B

In the abstract of “An Evil Copy”. This is the central issue with dynamic loading the researchers are trying to solve.

Question 2

Select the best definition of a code-reuse attack as mentioned in the research paper “An Evil Copy…”:

a. An attacker analyzes open-source code to guess what the program is running. They then exploit areas of the code to inject malicious data into and use a worm to infiltrate.
b. An attacker targets low level programming languages like C/C++. They reuse older attacks in an attempt to brute-force the program into accepting the malicious payload.
c. An attacker uses a new attack vector based on copy relocations. It allows attackers to escalate their privileges by copying packages from read-only memory locations to read-write memory locations.

Answer 2

Correct Answer: C

Question 3

“An Evil Copy…” states that _________ compilation is the root cause for the copy relocation violation (CoREV).

a. dynamic
b. linkage
c. separate
d. static

Answer 3

Correct answer: C

p. 5 of “An Evil Copy…”

Question 4

“An Evil Copy…” proposes three mitigation techniques for CoREV. All of these are such techniques EXCEPT:

a. Disable the dynamic loader
b. Detect through simple checker
c. Enable a compiler switch
d. Changing the toolchain

Answer 4

Correct Answer: A

p. 7 of “An Evil Copy…” lists the other three techniques

Question 5

Recompiling software is one such mitigation technique for CoREV. Ge, Payer, & Jaeger (2017) specifically recommended adding a certain compiler flag. This flag is:

a. -fPIC
b. -fPID
c. -fPIE
d. -*p

Answer 5

Correct Answer: A

p. 8 in “An Evil Copy”

Question 6

Does CoREV affect Microsoft, MacOS, or both?

a. Affects Mac OS
b. CoREV affects neither Microsoft or Mac OSes
c. Affects Microsoft OS
d. CoREV affects both Microsoft and Mac OSes

Answer 6

Correct Answer: B

p. 13 of “An Evil Copy…”