Many control-flow-hijacking attacks rely on information leakage to disclose the location of gadgets. To address this, several leakage-resilient defenses, have been proposed that fundamentally limit the power of information leakage. Examples of such defenses include address-space re-randomization, destructive code reads, and execute-only code memory. Underlying all of these defenses is some form of code randomization.

24th European Symposium on Research in Computer Security

Springer-Verlag

978-3-030-29958-3

10.1007/978-3-030-29959-0_5