ROP Gadget Prevalence and Survival under Compiler-based Binary Diversification Schemes

It is shown that a small population of diversified variants is sufficient to eliminate 90-99% of ROP gadgets across a collection of real-world applications and that the number of remaining gadgets may still be sufficient for an attacker to mount an effective attack regardless of the presence of software diversity.