Burn after reading: a shadow stack with microsecond-level runtime rerandomization for protecting return addresses

Abstract

Return-oriented programming (ROP) is an effective code-reuse attack in which short code sequences (i.e., gadgets) ending in a ret instruction are found within existing binaries and then executed by taking control of the call stack. The shadow stack, control flow integrity (CFI) and code (re)randomization are three popular techniques for protecting programs against return address overwrites. However, existing runtime rerandomization techniques operate on concrete return addresses, requiring expensive pointer tracking.

BibTeX

@inproceedings{Zou-Xue:ICSE20,
  author    = {Changwei Zou and
               Jingling Xue},
  title     = {Burn after reading: a shadow stack with microsecond-level runtime rerandomization for protecting return addresses},
  booktitle = {ICSE},
  pages     = {258--270},
  publisher = {{ACM}},
  year      = {2020},
}

Burn after reading: a shadow stack with microsecond-level runtime rerandomization for protecting return addresses

Abstract

Related papers