Software for Protection Against Code Reuse Attackers
Researchers at Purdue University have developed technology to defend software code from code-reuse attacks. This technology randomizes the internal structure of the executable code by randomly shuffling the function blocks in the target binary. This tool, called Marlin, implements a fine grained randomization based approach by modifying the layout of the executable code, thereby hindering code-reuse attack. Subsequently, the attacker is blocked from necessary knowledge of instruction addresses for code-reuse attacks. This technology can be applied to any ELF binary and every execution of it uses a different randomization.
Prevents code-reuse attacks, on software codeRandomizes the internal structure of code by using different randomizations for each execution
SoftwareCybersecurity
Elisa BertinoDatabase and Information Security GroupCyber CenterCERIASPurdue Computer Science
United States
None
美国
