Despite decades of research on software diversification, only address space layout randomization has seen widespread adoption. Code randomization, an effective defense …
In 2007, Shacham published a seminal paper on Return-Oriented Programming (ROP), the first systematic formulation of code reuse. The paper has been highly influential, profoundly …
Microcontroller-based embedded systems have become ubiquitous with the emergence of IoT technology. Given its critical roles in many applications, its security is becoming …
P Rajasekaran, S Crane, D Gens, Y Na… - Proceedings of the 15th …, 2020 - dl.acm.org
The widespread deployment of exploit mitigations such as CFI and shadow stacks are making code-reuse attacks increasingly difficult. This has forced adversaries to consider …
Memory-corruption attacks such as code-reuse attacks and data-only attacks have been a key threat to systems security. To counter these threats, researchers have proposed a variety …
Due to the address space layout randomization (ASLR), code reuse attacks (CRAs) require memory probes to get available gadgets. Code reading is the basic way to obtain code …
U Lee, C Park - IEEE access, 2020 - ieeexplore.ieee.org
Commodity operating systems are considered vulnerable. Therefore, when an application handles security-sensitive data, it is highly recommended to run the application in a trusted …
I Agadakos, N Demarinis, D Jin… - … Threats: Research and …, 2020 - dl.acm.org
Developers nowadays have access to an arsenal of toolkits and libraries for rapid application prototyping. However, when an application loads a library, the entirety of that …
T Zhang, M Cai, D Zhang, H Huang - Frontiers of Computer Science, 2022 - Springer
Currently, security-critical server programs are well protected by various defense techniques, such as Address Space Layout Randomization (ASLR), eXecute Only Memory …