Revisiting Address Space Randomization

• Main Authors: WANG, Zhi, CHENG, Renquan, GAO, Debin
• Format: text
• Language: English
• Published: Institutional Knowledge at Singapore Management University 2010
• Subjects: Address space randomization; return-oriented programming; software exploit; Information Security
• Online Access: https://ink.library.smu.edu.sg/sis_research/1321; https://ink.library.smu.edu.sg/context/sis_research/article/2320/viewcontent/icisc10_av.pdf
• Institution: Singapore Management University

Address space randomization is believed to be a strong defense against memory error exploits. Many code and data objects in a potentially vulnerable program and the system could be randomized, including those on the stack and heap, base address of code, order of functions, PLT, GOT, etc. Randomizing...