Stack Layout Randomization with Minimal Rewriting of Android Binaries

• Main Authors: Liang, Yu, Ma, Xinjie, Wu, Daoyuan, Tang, Xiaoxiao, GAO, Debin, Peng, Guojun, Jia, Chunfu, Zhang, Huanguo
• Format: text
• Language: English
• Published: Institutional Knowledge at Singapore Management University 2015
• Subjects: Memory layout randomization; Android security; Information Security
• Online Access: https://ink.library.smu.edu.sg/sis_research/2919; https://ink.library.smu.edu.sg/context/sis_research/article/3919/viewcontent/icisc15.pdf
• Institution: Singapore Management University

Stack-based attacks typically require that attackers have a good understanding of the stack layout of the victim program. In this paper, we leverage specific features on ARM architecture and propose a practical technique that introduces randomness to the stack layout when an Android application exec...