Programming Languages White Papers
When Good Instructions Go Bad: Generalizing Return-Oriented Programming to RISC
Overview This paper reconsiders the threat posed by Shacham's "Return-oriented programming" - a technique by which OX-style hardware protections are evaded via carefully crafted stack frames that divert control flow into the middle of existing variable-length x86 instructions - creating short new instructions streams that then return. The paper believes this attack is both more general and a greater threat than the author appreciated. In fact, the vulnerability is not limited to the x86 architecture or any particular operating system, is readily exploitable, and bypasses an entire category of malware protections. This paper demonstrates general return-oriented programming on the SPARC, a fixed instruction length RISC architecture with structured control flow.
| Publisher | Association for Computing Machinery | File Format | |
|---|---|---|---|
| Date Published | October 2008 | ||
| Format | White Papers | ||
| Topics | |||
-
Did you find this white paper useful? 0 out of 1 users found this white paper useful
White Paper RSSCitizants: Bringing IT In-House
DownloadCitizant enhances IT flexibility and scalability by creating a virtualized Dell infrastructure that will pay for itself in 18 months.
Designing High Availability for Internet Information Services
End downtime forever! - Organizations today are relying more and more on Web services for the implementation of mission-critical applications. With the advent of Service-Oriented Architectures (SOAs),which make extensive use...
Five JavaScript Frameworks: A Point-by-Point Comparison
There are a multitude of JavaScript frameworks available today for programming rich client-side interactions in web applications. With many such different options, it is important to choose a framework that...
Increase Reliability with IBM WebSphere File Transfer Edition (FTE)
"Does your organization still use FTP software? Did you know these links require 3 to 4 times more time and effort to build and maintain versus SOA-based Application Integration projects?...
Video-Centric Network Coding Strategies for 4G Wireless Networks: An Overview
The impact of Internet content and IP based television on networks is growing. Video is now ubiquitous in the home and on the street. It demands new approaches to video...
