文件列表:

.all-contributorsrc (5816, 2023-12-19)
.mlc_config.json (129, 2023-12-19)
CODE_OF_CONDUCT.md (5307, 2023-12-19)
LICENSE (14529, 2023-12-19)
Makefile (2603, 2023-12-19)
book.bib (24299, 2023-12-19)
book.md (134076, 2023-12-19)
build_with_docker.bat (127, 2023-12-19)
build_with_docker.sh (215, 2023-12-19)
contributing.md (6308, 2023-12-19)
docker/ (0, 2023-12-19)
docker/Dockerfile (3389, 2023-12-19)
docker/entrypoint.sh (52, 2023-12-19)
img/ (0, 2023-12-19)
img/CacheIndexing.svg (13526, 2023-12-19)
img/CacheLevels.svg (3325, 2023-12-19)
img/cachesets.svg (10347, 2023-12-19)
img/jop.svg (107660, 2023-12-19)
img/non-control-data-attack.svg (44500, 2023-12-19)
img/physical_attacks.svg (17160, 2023-12-19)
img/rop-call-stack.svg (102925, 2023-12-19)
img/rop-control-flow.svg (75094, 2023-12-19)
img/side_channel_leakage_figure_1_branch.svg (14586, 2023-12-19)
img/side_channel_leakage_figure_2_duration.svg (9998, 2023-12-19)
img/side_channel_leakage_figure_3_toggle.svg (16889, 2023-12-19)
img/stack-buffer-overflow.svg (75358, 2023-12-19)
theme/ (0, 2023-12-19)
theme/html/ (0, 2023-12-19)
theme/html/clickable_headers.lua (350, 2023-12-19)
theme/html/convert_to_sidenote.lua (1092, 2023-12-19)
theme/html/default.css (6394, 2023-12-19)
theme/html/markup_issue.lua (1190, 2023-12-19)
theme/html/markup_todo.lua (1972, 2023-12-19)
theme/html/pandoc_template.html (11492, 2023-12-19)
... ...

# llsoftsecbook: a book on Low-Level Software Security for Compiler Developers [](https://creativecommons.org/licenses/by/4.0/) [](https://github.com/llsoftsec/llsoftsecbook/actions/workflows/main.yml) [](https://discord.gg/Bm55Z9Ppgn) [](#contributors-) This book aims to provide a structured, broad overview of all attacks and security hardening techniques relevant for code generation tools. ## Purpose Compilers, assemblers and similar tools generate all the binary code that processors execute. Therefore, they play a crucial role in hardening binaries against security threats. The variety of attacks and hardening techniques has been rising sharply, and it is becoming difficult to maintain a good broad basic understanding of all of them. The purpose of this book is to help every compiler developer that needs to learn about software security relevant to compilers. It aims to achieve that by providing a description of all relevant high-level aspects of attacks, vulnerabilities, mitigations and hardening techniques. For further details, this book provides pointers to material on specific techniques. Even though the focus is on compiler developers, we expect that this book will also be useful to other people working on low-level software. ## Why an open source book? The idea for this book emerged out of a frustration of not finding a good overview on this topic. Kristof Beyls and Georgia Kouveli, compiler engineers working on security features from time to time, wished a book like this would exist. After not finding such a book, we decided to try and write one ourselves. We immediately realized that we do not have all necessary expertise ourselves to complete such a daunting task. So we decided to try and create this book in an open source style, seeking contributions from many experts. As you read this, the book remains unfinished. This book may well never be finished, as new vulnerabilities continue to be discovered regularly. Our hope is that developing the book as an open source project will allow it to continue to evolve and improve. It being open source increases the likelihood that it remains relevant as new vulnerabilities and mitigations emerge. Kristof and Georgia are far from experts on all possible vulnerabilities. So what is the plan to get high quality content to cover all relevant topics? It is two-fold. First, by studying specific topics, we hope to gain enough knowledge to write up a good summary for this book. Second, we very much invite and welcome contributions. If you're interested in potentially contributing content, please let us know. As a reader, you can also contribute to making this book better. We highly encourage feedback, both positive and constructive criticisms. You can share your feedback by raising a GitHub [Issue](https://github.com/llsoftsec/llsoftsecbook/issues), starting a GitHub [Discussion](https://github.com/llsoftsec/llsoftsecbook/discussions), or by sharing your thoughts on our [Discord server](https://discord.gg/Bm55Z9Ppgn). ## Live version A live top-of-main version of the book is available as a webpage at . A [PDF](https://llsoftsec.github.io/llsoftsecbook/book.pdf) is also available. ## Build instructions You can build the book by running ```console $ make all ``` This requires pandoc, latex and necessary latex packages to be installed. The easiest way to make sure you build the book with the right versions of those tools is to use the script build_with_docker.sh: ```console $ ./build_with_docker.sh ``` This builds a docker container with the exact versions of pandoc, latex and necessary extra packages; and builds the book using that container. You'll find the PDF and HTML versions of the book in build/book.pdf and build/book.html if the build finishes successfully. ## Contributing Please find contribution guidelines in . ## Contributors Thanks goes to these wonderful people ([emoji key](https://allcontributors.org/docs/en/emoji-key)):

Kristof Beyls	Francesco Petrogalli	g-kouv	Simon Tatham	Sam Ellis	Lyndon Fawcett	Jonathan Louis Kaplan
Jacob Bramley	Joseph Yiu	Arnaud de Grandmaison	Fare9	Fernando Magno Quinto Pereira	Reini Urban	Saagar Jha
Bill Wendling	acoplan-arm	Lucian Popescu	Matt	Kyle Anthony Williams	Swarn Priya

This project follows the [all-contributors](https://github.com/all-contributors/all-contributors) specification. Contributions of any kind welcome! ## License
This book is licensed under a Creative Commons Attribution 4.0 International License.

近期下载者：

相关文件：

评论：[我要评论] [举报此文件]

收藏者：