English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Plus monthly

Global: Zendy Tools annual

Global: Zendy Tools monthly

Global: Zendy Free Plan

Fine-grained Address Space Randomization has been considered as an effectiveprotection against code reuse attacks such as ROP/JOP. However, it only employsa one-time randomization, and such a limitation has been exploited by recentjust-in-time ROP and side channel ROP, which collect gadgets on-the-fly anddynamically compile them for malicious purposes. To defeat these advanced codereuse attacks, we propose a new defense principle: instantly obsoleting theaddress-code associations. We have initialized this principle with a noveltechnique called virtual space page table remapping and implemented thetechnique in a system CHAMELEON. CHAMELEON periodically re-randomizes thelocations of code pages on-the-fly. A set of techniques are proposed to achieveour goal, including iterative instrumentation that instruments ato-be-protected binary program to generate a re-randomization compatiblebinary, runtime virtual page shuffling, and function reordering and instructionrearranging optimizations. We have tested CHAMELEON with over a hundred binaryprograms. Our experiments show that CHAMELEON can defeat all of our testedexploits by both preventing the exploit from gathering sufficient gadgets, andblocking the gadgets execution. Regarding the interval of our re-randomization,it is a parameter and can be set as short as 100ms, 10ms or 1ms. The experimentresults show that CHAMELEON introduces on average 11.1%, 12.1% and 12.9%performance overhead for these parameters, respectively.

Instantly Obsoleting the Address-code Associations: A New Principle for Defending Advanced Code Reuse Attack