ComputingComputer EngineeringComputer ScienceComputer ArchitectureComputer SecurityHardware SecurityAnti-analysis TechniquesControl-flow AnalysisInstruction Set ArchitectureMicroarchitectural SecurityMicroarchitecture DesignStatic Vulnerability AnalysisBinary Control-flow AnalysisInstruction Set DesignInstruction Set SemanticsReturn-to-libc Attacks
We present new techniques that allow a return-into-libc attack to be mounted on x86 executables that calls no functions at all. Our attack combines a large number of short instruction sequences to build gadgets that allow arbitrary computation. We show how to discover such instruction sequences by means of static analysis. We make use, in an essential way, of the properties of the x86 instruction set.
8
On the effectiveness of address-space randomization
Hovav Shacham, Matthew J. Page, Ben Pfaff et al. · 2004 · 861 citations
Smashing The Stack For Fun And Profit
A. One · Medical Entomology and Zoology · 1996 · 769 citations
Automating mimicry attacks using static binary analysis
Christopher Kruegel, Engin Kirda, D. Mutz et al. · 2005 · 178 citations
Evaluating SFI for a CISC architecture
Stephen McCamant, Greg Morrisett · 2006 · 167 citations