Researchers introduced the Einstein tool for automating data attack

Security researchers have developed a tool Einstein, designed to automatically generate data-only attacks. Unlike traditional methods focused on code substitution, this technology manipulates data within an application's memory.

The principle of Einstein is to bypass existing control-flow defense mechanisms. Instead of attempting to intercept instruction execution, the tool identifies critical data structures, the modification of which allows an attacker to gain control over the program's logic or increase privileges in the system.

During testing, the authors proved that such attacks are practically feasible and require a revision of current cybersecurity strategies. The tool automates the process of finding vulnerable vectors, which significantly lowers the barrier to conducting complex attacks on protected software environments.

The research results highlight the vulnerability of modern systems to attacks that do not leave traces in the form of modified code. Experts note that current protection methods, such as ASLR or DEP, are ineffective against attacks directed exclusively at data, as they do not violate the integrity of executable instructions.

The development of Einstein demonstrates the need to implement new levels of protection focused on checking data integrity in real-time. This study changes the perception of application security, pointing to critical gaps in memory protection that were previously considered secondary compared to control-flow attacks.