2007 · 47 citations · 1 references
ComputingComputer ScienceCybersecurityComputer SecurityOperating SystemsVulnerability AnalysisAttack Surface AnalysisExploit DevelopmentOperating System SecurityOperating System VulnerabilitiesVulnerability ManagementAddress Space Layout RandomizationAddress Space ManagementAddress Space MappingAttack Surface ReductionDefault Configuration SecurityExploit DetectionRandom-access MemoryVirtual Address Space
Address space layout randomization (ASLR) is a prophylactic security technology aimed at reducing the effectiveness of exploit attempts. With the advent of the Microsoft® Windows Vista operating system, ASLR has been integrated into the default configuration of the Windows® operating system for the first time. We measure the behavior of the ASLR implementation in the Windows Vista RTM release. Our analysis of the results uncovers predictability in the implementation that reduces its effectiveness.
1
On the effectiveness of address-space randomization
Hovav Shacham, Matthew J. Page, Ben Pfaff et al. · 2004 · 861 citations