Work

Burn after reading: a shadow stack with microsecond-level runtime rerandomization for protecting return addresses

Year: 2020

Type: conference-paper

Abstract: Return-oriented programming (ROP) is an effective code-reuse attack in which short code sequences (i.e., gadgets) ending in a ret instruction are found within existing binaries and then executed by taking control of the call stack. The shadow stack, control flow integrity (CFI) and code (re)randomization are three popular techniques for protecting programs against return address overwrites. However, existing runtime rerandomization techniques operate on concrete return addresses, requiring expensive pointer tracking.

Source: ACM/IEEE International Conference on Software Engineering: Companion Proceedings (ICSE-Companion)

DOI: 10.1145/3377811.3380439

Authors: Changwei Zou, Jingling Xue

Institution: UNSW Sydney

Language: English

Topic: Security and Verification in Computing

Subfield: Hardware and Architecture

Field: Computer Science

Domain: Physical Sciences

Open Access status: green

Funder: Australian Research Council

Award: Securing systems against code-reuse attacks with modular pointer analysis