削弱了这种技巧的效果-OntheEffectivenessofAddress-.pdfVIP

On the Effectiveness of Address-Space Randomization Hovav Shacham Matthew Page Ben Pfaff Stanford University Stanford University Stanford University hovav@ mpage@ blp@ Eu-Jin Goh Nagendra Modadugu Dan Boneh Stanford University Stanford University Stanford University eujin@ nagendra@ dabo@ ABSTRACT Keywords Address-space randomization is a technique used to fortify Address-space randomization, diversity, automated attacks systems against buer over ow attacks. The idea is to in- troduce articial diversity by randomizing the memory lo- 1. INTRODUCTION cation of certain system components. This mechanism is available for both Linux (via PaX ASLR) and OpenBSD. Randomizing the memory-address-space layout of soft- We study the eectiveness of address-space randomization ware has recently garnered great interest as a means of di- and nd that its utility on 32-bit architectures is limited by versifying the monoculture of software [19, 18, 26, 7]. It the number of bits available for address randomization. In is widely believed that randomizing the address-space lay- particular, we demonstrate a derandomization attack that out of a software program prevents attackers from using the will convert any standard buer-over ow exploit into an ex- same expl