English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Plus monthly

Global: Zendy Tools annual

Global: Zendy Tools monthly

Global: Zendy Free Plan

Current low-level exploits often rely on code-reuse, whereby short sectionsof code (gadgets) are chained together into a coherent exploit that can beexecuted without the need to inject any code. Several protection mechanismsattempt to eliminate this attack vector by applying code transformations toreduce the number of available gadgets. Nevertheless, it has emerged that theresidual gadgets can still be sufficient to conduct a successful attack.Crucially, the lack of a common metric for "gadget quality" hinders theeffective comparison of current mitigations. This work proposes four metricsthat assign scores to a set of gadgets, measuring quality, usefulness, andpracticality. We apply these metrics to binaries produced when compilingprograms for architectures implementing Intel's recent MPX CPU extensions. Ourresults demonstrate a 17% increase in useful gadgets in MPX binaries, and adecrease in side-effects and preconditions, making them better suited for ROPattacks.

Analyzing the Gadgets Towards a Metric to Measure Gadget Quality