kR^X: Comprehensive Kernel Protection against Just-In-Time Code Reuse
kR^X: Comprehensive Kernel Protection against Just-In-Time Code Reuse
Marios Pomonis,Theofilos Petsios,2 Authors,V. Kemerlis
2017 · DOI: 10.1145/3064176.3064216
European Conference on Computer Systems · 72 Citations
TLDR
KR^X is presented, a previously unexplored point in the design space, where a hypervisor or a super-privileged component is not required and is readily applicable to the x86-64 Linux kernel and can benefit from hardware support to optimize performance.