[PATCH] Insert random noops to increase security against ROP attacks (llvm)

PaX Team pageexec at gmail.com
Mon Jan 5 18:53:10 PST 2015


On 5 Jan 2015 at 16:32, Stephen Crane wrote:

> In a nutshell, the idea is to create functionally equivalent copies of
> the software with different code layouts to prevent attackers from
> knowing where the code they want to reuse is located.

isn't it defeated by BROP and other techniques?

http://crypto.stanford.edu/~dabo/pubs/abstracts/brop.html
http://www.scs.stanford.edu/~sorbo/brop/bittau-brop.pdf
http://www.ieee-security.org/TC/SP2013/papers/4977a574.pdf




More information about the llvm-commits mailing list