Is Less Really More? Why Reducing Code Reuse Gadget Counts via Software Debloating Doesn't Necessarily Lead to Better Security
Is Less Really More? Why Reducing Code Reuse Gadget Counts via Software Debloating Doesn't Necessarily Lead to Better Security
Michael D. Brown,S. Pande
2019 · DBLP: journals/corr/abs-1902-10880
arXiv.org · 2 Citations
TLDR
It is demonstrated that software debloating can achieve high gadget count reduction rates, yet fail to limit an attacker's ability to construct an exploit, and a security oriented human-in-the-loop model is proposed that overcomes these limitations.