UPDF AI

It's a TRaP: Table Randomization and Protection against Function-Reuse Attacks

Stephen Crane,Stijn Volckaert,7 Authors,M. Franz

2015 · DOI: 10.1145/2810103.2813682
Conference on Computer and Communications Security · 139 Citations

TLDR

This paper significantly improve and simplify the COOP attack, and presents a comprehensive code-reuse defense which is resilient against reuse of dynamically-bound functions and introduces two novel defense techniques: a practical technique to randomize the layout of tables containing code pointers resilient to memory disclosure and booby trap insertion to mitigate the threat of brute-force attacks iterating over the randomized tables.