Binary stirring: self-randomizing instruction addresses of legacy x86 binary code

No abstract is available for this paper.

• Publication year

  2012

• Venue

  Conference on Computer and Communications Security

• Publication date

  2012-10-16

• Fields of study

  Computer Science

• Identifiers
  DOI 10.1145/2382196.2382216
• External record

  Open on Semantic Scholar

• Source metadata

  Semantic Scholar

• No claims are published for this paper.

• No concepts are published for this paper.

• Dynamic floating-point cancellation detection

  2013cited by this paper
• Smashing the Gadgets: Hindering Return-Oriented Programming Using In-place Code Randomization

  2012cited by this paper
• ILR: Where'd My Gadgets Go?

  2012cited by this paper
• ROPdefender: a detection tool to defend against return-oriented programming attacks

  2011cited by this paper
• Q: Exploit Hardening Made Easy

  2011influential reference
• Retrofitting Security in COTS Software with Binary Rewriting

  2011cited by this paper
• Differentiating Code from Data in x86 Binaries

  2011cited by this paper
• G-Free: defeating return-oriented programming through gadget-less binaries

  2010cited by this paper
• Return-oriented programming without returns

  2010cited by this paper
• Binary Rewriting without Relocation Information

  2010cited by this paper
• Defeating return-oriented rootkits with "Return-Less" kernels

  2010cited by this paper
• DROP: Detecting Return-Oriented Programming Malicious Code

  2009cited by this paper
• Orchestra: intrusion detection using parallel execution and monitoring of program variants in user-space

  2009cited by this paper
• Control-flow integrity principles, implementations, and applications

  2009cited by this paper
• Surgically Returning to Randomized lib(c)

  2009cited by this paper
• Native Client: A Sandbox for Portable, Untrusted x86 Native Code

  2009cited by this paper
• Data Space Randomization

  2008cited by this paper
• ConSpec - A Formal Language for Policy Specification

  2008cited by this paper
• Data Randomization

  2008cited by this paper
• When good instructions go bad: generalizing return-oriented programming to RISC

  2008cited by this paper
• Automated Whitebox Fuzz Testing

  2008cited by this paper
• Randomized Instruction Set Emulation to Disrupt Binary Code Injection Attacks

  2007cited by this paper
• The geometry of innocent flesh on the bone: return-into-libc without function calls (on the x86)

  2007cited by this paper
• Run-Time Randomization to Mitigate Tampering

  2007cited by this paper
• Diversified Process Replicæ for Defeating Memory Error Exploits

  2007cited by this paper
• RandSys: Thwarting Code Injection Attacks with System Service Interface Randomization

  2007cited by this paper
• Exterminator: automatically correcting memory errors with high probability

  2007cited by this paper
• N-Variant Systems: A Secretless Framework for Security through Diversity

  2006cited by this paper
• DieHard: probabilistic memory safety for unsafe languages

  2006cited by this paper
• TaintTrace: Efficient Flow Tracing with Dynamic Binary Rewriting

  2006cited by this paper
• EXE: automatically generating inputs of death

  2006cited by this paper
• Evaluating SFI for a CISC Architecture

  2006cited by this paper
• Link-time binary rewriting techniques for program compaction

  2005cited by this paper
• Java-MOP: A Monitoring Oriented Programming Environment for Java

  2005cited by this paper
• Efficient Techniques for Comprehensive Protection from Memory Error Exploits

  2005influential reference
• Composing security policies with polymer

  2005cited by this paper
• On the effectiveness of address-space randomization

  2004cited by this paper
• Transparent runtime randomization for security

  2003cited by this paper
• Countering code-injection attacks with instruction-set randomization

  2003cited by this paper
• Address Obfuscation: An Efficient Approach to Combat a Broad Range of Memory Error Exploits

  2003cited by this paper
• PointGuard™: Protecting Pointers from Buffer Overflow Vulnerabilities

  2003cited by this paper
• Secure Execution via Program Shepherding

  2002cited by this paper
• Mitigating buffer overflows by operating system randomization

  2002cited by this paper
• Statically Detecting Likely Buffer Overflow Vulnerabilities

  2001cited by this paper
• Enforceable security policies

  2000cited by this paper
• SASI enforcement of security policies: a retrospective

  1999cited by this paper
• Detours: binary interception of Win32 functions

  1999cited by this paper
• Building diverse computer systems

  1997cited by this paper
• A Comparison of OS Extension Technologies

  1996cited by this paper
• Dynamic program instrumentation for scalable performance tools

  1994cited by this paper
• Efficient software-based fault isolation

  1994cited by this paper
• Security Enhancements in Red Hat Enterprise Linux ( beside SELinux )

  year unknowncited by this paper

• Towards Sound Reassembly of Modern x86-64 Binaries

  2025cites this paper
• Timing and Speculative Execution Attacks: Defeating State-of-the-Art Code-Reuse Defenses

  2025cites this paper
• PtrProxy: Efficient code re-randomization on AArch64 platform

  2025cites this paper
• MVX-based mitigation of position-independent code reuse

  2025cites this paper
• Fine Grained Address Space Layout Randomization Using Noncontiguous Per-Function Memory Segment Assignment

  2025cites this paper
• CrashROP: A Real-Time ROP Attack Detection Method Based on Crash Context Analysis

  2025cites this paper
• Overview of the Code-Reuse Attacks Mitigations, and Evaluation using SMAA-2 Approach

  2025cites this paper
• Retrofitting XoM for Stripped Binaries without Embedded Data Relocation

  2024cites this paper
• LibAFL QEMU: A Library for Fuzzing-oriented Emulation

  2024cites this paper
• Chaos: Function Granularity Runtime Address Layout Space Randomization for Kernel Module

  2024cites this paper
• Impact of AI on the Cyber Kill Chain: A Systematic Review

  2024cites this paper
• DAEDALUS: Defense Against Firmware ROP Exploits Using Stochastic Software Diversity

  2024cites this paper
• ROPGMN: Effective ROP and variants discovery using dynamic feature and graph matching network

  2024cites this paper
• Binary Code Security: The Source of Vulnerability, Exploitation and Mitigation Techniques

  2024cites this paper
• Effective Memory Diversification in Legacy Systems

  2023cites this paper
• Renewable Just-In-Time Control-Flow Integrity

  2023cites this paper
• ARMore: Pushing Love Back Into Binaries

  2023influential citation
• What you can read is what you can't execute

  2023cites this paper
• JiuJITsu: Removing Gadgets with Safe Register Allocation for JIT Code Generation

  2023cites this paper
• Reusable Enclaves for Confidential Serverless Computing

  2023cites this paper
• Discovery and Identification of Memory Corruption Vulnerabilities on Bare-Metal Embedded Devices

  2023cites this paper
• Reassembly is Hard: A Reflection on Challenges and Strategies

  2023cites this paper
• SAFER: Efficient and Error-Tolerant Binary Instrumentation

  2023cites this paper
• LoadLord: Loading on the Fly to Defend Against Code-Reuse Attacks

  2023cites this paper
• NG-MVEE: A New Proposed Hybrid Technique for Enhanced Mitigation of Code Re-Use Attack

  2023cites this paper
• Accurate Disassembly of Complex Binaries Without Use of Compiler Metadata

  2023cites this paper
• Hardware-Based Software Control Flow Integrity: Review on the State-of-the-Art Implementation Technology

  2023cites this paper
• Randezvous: Making Randomization Effective on MCUs

  2022cites this paper
• How’d Security Benefit Reverse Engineers? : The Implication of Intel CET on Function Identification

  2022cites this paper
• Breaking Embedded Software Homogeneity with Protocol Mutations

  2022cites this paper
• From Dynamic Loading to Extensible Transformation: An Infrastructure for Dynamic Library Transformation

  2022influential citation
• Rave: A Modular and Extensible Framework for Program State Re-Randomization

  2022cites this paper
• KASLR in the age of MicroVMs

  2022cites this paper
• fASLR: Function-Based ASLR via TrustZone-M and MPU for Resource-Constrained IoT Systems

  2022cites this paper
• An In-Depth Survey of Bypassing Buffer Overflow Mitigation Techniques

  2022cites this paper
• Buddy Stacks: Protecting Return Addresses with Efficient Thread-Local Storage and Runtime Re-Randomization

  2022cites this paper
• SeBROP: blind ROP attacks without returns

  2022cites this paper
• FH-CFI: Fine-grained hardware-assisted control flow integrity for ARM-based IoT devices

  2022cites this paper
• SaBRe: load-time selective binary rewriting

  2022cites this paper
• Adelie: continuous address space layout re-randomization for Linux drivers

  2022cites this paper
• Gadgets Splicing: Dynamic Binary Transformation for Precise Rewriting

  2022cites this paper
• Binary Exploitation in Industrial Control Systems: Past, Present and Future

  2022cites this paper
• GRIN: Make Rewriting More Precise

  2022cites this paper
• fASLR: Function-Based ASLR for Resource-Constrained IoT Systems

  2022cites this paper
• Formally verified lifting of C-compiled x86-64 binaries

  2022cites this paper
• Mitigating Memory-Safety Bugs with Efficient Out-of-Process Integrity Checking

  2021cites this paper
• [m]allotROPism: a metamorphic engine for malicious software variation development

  2021cites this paper
• Dynamic Binary Translation for SGX Enclaves

  2021cites this paper
• Constraint-based Diversification of JOP Gadgets

  2021cites this paper
• Tutorial: Investigating Advanced Exploits for System Security Assurance

  2021cites this paper
• Challenges in cybersecurity: Lessons from biological defense systems

  2021cites this paper
• ROP Defense Using Trie Graph for System Security

  2021cites this paper
• Verification of Functional Correctness of Code Diversification Techniques

  2021cites this paper
• BadASLR: Exceptional Cases of ASLR Aiding Exploitation

  2021cites this paper
• Securely Sharing Randomized Code That Flies

  2021influential citation
• Stopping Memory Disclosures via Diversification and Replicated Execution

  2021cites this paper
• Towards Optimal Use of Exception Handling Information for Function Detection

  2021cites this paper
• Automatic Diversity in the Software Supply Chain

  2021cites this paper
• Exploitation Techniques for Data-oriented Attacks with Existing and Potential Defense Approaches

  2021cites this paper
• On Architectural Support for Instruction Set Randomization

  2020cites this paper
• De-randomizing the Code Segment with Timing Function Attack

  2020cites this paper
• Thwarting Control Plane Attacks with Displaced and Dilated Address Spaces

  2020cites this paper
• Enhancing Randomization Entropy of x86-64 Code while Preserving Semantic Consistency

  2020cites this paper
• Software Diversity for Cyber Deception

  2020cites this paper
• Quantitative Assessment on the Limitations of Code Randomization for Legacy Binaries

  2020influential citation
• Dynamic Computational Diversity with Multi-Radix Logic and Memory

  2020cites this paper
• Lessons Learned in Network and Memory-Based Moving Target Defenses

  2020cites this paper
• μSBS: Static Binary Sanitization of Bare-metal Embedded Devices for Fault Observability

  2020cites this paper
• A Game Theoretic Framework for Software Diversity for Network Security

  2020cites this paper
• A Framework for Robust, Low-Overhead Binary Instrumentation

  2020cites this paper
• Practical Fine-Grained Binary Code Randomization†

  2020cites this paper
• Burn After Reading: A Shadow Stack with Microsecond-level Runtime Rerandomization for Protecting Return Addresses**Thanks to all the reviewers for their valuable comments. This research is supported by an Australian Research Council grant (DP180104069).

  2020cites this paper
• Efficient Load-Time Diversity for an Embedded Real-Time Operating System

  2020cites this paper
• Enclave Computing Paradigm: Hardware-assisted Security Architectures & Applications

  2020cites this paper
• On the Impact of Exception Handling Compatibility on Binary Instrumentation

  2020cites this paper
• BinRec: dynamic binary lifting and recompilation

  2020cites this paper
• Integrated moving target defense and control reconfiguration for securing Cyber-Physical systems

  2020cites this paper
• A CFI Countermeasure Against GOT Overwrite Attacks

  2020cites this paper
• A Survey of Exploitation Techniques and Defenses for Program Data Attacks

  2020cites this paper
• SoK: All You Ever Wanted to Know About x86/x64 Binary Disassembly But Were Afraid to Ask

  2020cites this paper
• Egalito: Layout-Agnostic Binary Recompilation

  2020cites this paper
• FloVasion: Towards Detection of non-sensitive Variable Based Evasive Information-Flow in Android Apps

  2020cites this paper
• A Framework for Software Diversification with ISA Heterogeneity

  2020cites this paper
• Preventing Code Reuse Attacks On Modern Operating Systems

  2020influential citation
• Computer Safety, Reliability, and Security: 39th International Conference, SAFECOMP 2020, Lisbon, Portugal, September 16–18, 2020, Proceedings

  2020cites this paper
• Layered Object-Oriented Programming: Advanced VTable Reuse Attacks on Binary-Level Defense

  2019influential citation
• A Novel and Fine-grained Heap Randomization Allocation Strategy for Effectively Alleviating Heap Buffer Overflow Vulnerabilities

  2019cites this paper
• Practical Smart Contracts on Bitcoin

  2019cites this paper
• From Hack to Elaborate Technique—A Survey on Binary Rewriting

  2019cites this paper
• Defeating Denial-of-Service Attacks in a Self-Managing N-Variant System

  2019cites this paper
• A study of Binary Instrumentation techniques

  2019influential citation
• A Framework to Secure Applications with ISA Heterogeneity

  2019cites this paper
• FastKitten: Practical Smart Contracts on Bitcoin

  2019cites this paper
• Defending against ROP Attacks with Nearly Zero Overhead

  2019cites this paper
• Methodologies for Quantifying (Re-)randomization Security and Timing under JIT-ROP

  2019influential citation
• Mimosa: Protecting Private Keys Against Memory Disclosure Attacks Using Hardware Transactional Memory

  2019cites this paper
• An Approach of Code Pointer Hiding Based on a Resilient Area

  2019cites this paper
• ARM Pointer Authentication based Forward-Edge and Backward-Edge Control Flow Integrity for Kernels

  2019cites this paper
• Pyronia: Intra-Process Access Control for IoT Applications

  2019cites this paper
• Smokestack: Thwarting DOP Attacks with Runtime Stack Layout Randomization

  2019cites this paper