[LLVMdev] SFI and Artificial Diversity

[Kenneth Adam Miller]

Awesome!

Thanks so so much! I'm very interested in doing some work with compilers.
Yeah, I'm considering writing a research proposal where I work for JIT-SFI,
SFI Evasion Technique and Mitigation, and a few other things. Considering
your experience working on modifying llvm, what would you say would be a
topic where I could start out doing some good work on, either in a new
direction or in improving what you have?

And how has this research not made it into the official mainline branch? I
want to see it get shipped out to production. It would be fantastic if I
could recompile my software to stop attacks.

On Fri, Mar 27, 2015 at 4:47 PM, Per Larsen <perl at uci.edu> wrote:

> Hi Kenneth,
>
> I'm part of a research group at UC Irvine that has been working on
> artificial software diversity for LLVM and clang. You can check our Github
> repositories here:
> https://github.com/securesystemslab/multicompiler
> https://github.com/securesystemslab/multicompiler-clang
>
> Our public version is based on LLVM 3.5 but we also have patches for LLVM
> 3.6 and beyond which I can share with you. In collaboration with JF Bastien
> and others, we are in the process of upstreaming these patches. So far the
> random  number generator and a machine-independent NOP-insertion pass have
> been accepted into LLVM mainline. We have several additional diversifying
> transformations that we want to contribute. If you are interested in
> participating in this effort, we're happy to collaborate with you.
>
> W.r.t. SFI, I believe the PNaCL source code is available.
>
> Cheers,
> Per
>
> http://www.ics.uci.edu/~perl/
>
> On Fri, Mar 27, 2015 at 7:22 AM Kenneth Adam Miller <
> kennethadammiller at gmail.com> wrote:
>
>> I read a lot of white papers, but is there not any open source
>> implementation of SFI or artificial diversity? I google around, but I can't
>> find anywhere anything regarding what I could openly download. In the same
>> respect, I would also like to make an innovation proposal to create such an
>> endeavor if there is not one already.
>> _______________________________________________
>> LLVM Developers mailing list
>> LLVMdev at cs.uiuc.edu         http://llvm.cs.uiuc.edu
>> http://lists.cs.uiuc.edu/mailman/listinfo/llvmdev
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.llvm.org/pipermail/llvm-dev/attachments/20150327/f6840875/attachment.html>