Portal de Periódicos da CAPES

Survey of return-oriented programming defense mechanisms

2015; Hindawi Publishing Corporation; Volume: 9; Issue: 10 Linguagem: Inglês

10.1002/sec.1406

1939-0114

Yefeng Ruan, Sivapriya Kalyanasundaram, Xukai Zou,

Radiation Effects in Electronics

A prominent software security violation -buffer overflow attack has taken various forms and poses serious threats until today.One such vulnerability is Return-Oriented Programming (ROP) attack.An ROP attack circumvents the Dynamic Execution Prevention (DEP) which is employed in modern operating systems to prevent execution of data segments, and attempts to execute unintended instructions by overwriting the stack exploiting the buffer overflow vulnerability.Numerous defense mechanisms have been proposed in the past few years to mitigate/prevent the attack -compile time methods that add checking logic to the program code before compilation, dynamic methods that monitor the control flow integrity during execution and randomization methods that aim at randomizing instruction locations.This paper discusses 1) these different static, dynamic and randomization techniques proposed recently and 2) compares the techniques based on their effectiveness and performances.