No-Execute-After-Read: Preventing Code Disclosure in Commodity Software

No abstract is available for this paper.

• Publication year

  2016

• Venue

  ACM Asia Conference on Computer and Communications Security

• Publication date

  2016-05-30

• Fields of study

  Computer Science, Engineering

• Identifiers
  DOI 10.1145/2897845.2897891
• External record

  Open on Semantic Scholar

• Source metadata

  Semantic Scholar

• No claims are published for this paper.

• No concepts are published for this paper.

• Accelerating Wright–Fisher Forward Simulations on the Graphics Processing Unit

  2016cited by this paper
• Return to the Zombie Gadgets: Undermining Destructive Code Reads via Code Inference Attacks

  2016cited by this paper
• Heisenbyte: Thwarting Memory Disclosure Attacks using Destructive Code Reads

  2015influential reference
• Readactor: Practical Code Randomization Resilient to Memory Disclosure

  2015influential reference
• HideM: Protecting the Contents of Userspace Memory in the Face of Disclosure Vulnerabilities

  2015influential reference
• Control-Flow Bending: On the Effectiveness of Control-Flow Integrity

  2015cited by this paper
• Control Jujutsu: On the Weaknesses of Fine-Grained Control Flow Integrity

  2015cited by this paper
• Counterfeit Object-oriented Programming: On the Difficulty of Preventing Code Reuse Attacks in C++ Applications

  2015cited by this paper
• Isomeron: Code Randomization Resilient to (Just-In-Time) Return-Oriented Programming

  2015cited by this paper
• Recognizing Functions in Binaries with Neural Networks

  2015cited by this paper
• Oxymoron: Making Fine-Grained Memory Randomization Practical by Allowing Code Sharing

  2014influential reference
• Hacking Blind

  2014cited by this paper
• You Can Run but You Can't Read: Preventing Disclosure Exploits in Executable Code

  2014influential reference
• SoK: Eternal War in Memory

  2013influential reference
• Just-In-Time Code Reuse: On the Effectiveness of Fine-Grained Address Space Layout Randomization

  2013influential reference
• Enhanced Operating System Security Through Efficient and Fine-grained Address Space Randomization

  2012cited by this paper
• Smashing the Gadgets: Hindering Return-Oriented Programming Using In-place Code Randomization

  2012cited by this paper
• ILR: Where'd My Gadgets Go?

  2012cited by this paper
• Binary stirring: self-randomizing instruction addresses of legacy x86 binary code

  2012cited by this paper
• Jump-oriented programming: a new class of code-reuse attack

  2011cited by this paper
• Differentiating Code from Data in x86 Binaries

  2011cited by this paper
• Launching Return-Oriented Programming Attacks against Randomized Relocatable Executables

  2011cited by this paper
• JITDefender: A Defense against JIT Spraying Attacks

  2011cited by this paper
• Return-oriented programming without returns

  2010cited by this paper
• Control-flow integrity principles, implementations, and applications

  2009cited by this paper
• The geometry of innocent flesh on the bone: return-into-libc without function calls (on the x86)

  2007cited by this paper
• SPEC CPU2006 benchmark descriptions

  2006cited by this paper
• On the effectiveness of address-space randomization

  2004cited by this paper
• Mimicry attacks on host-based intrusion detection systems

  2002cited by this paper
• Building diverse computer systems

  1997cited by this paper

• PtrProxy: Efficient code re-randomization on AArch64 platform

  2025cites this paper
• War on JITs: Software-Based Attacks and Hybrid Defenses for JIT Compilers - A Comprehensive Survey

  2025cites this paper
• Retrofitting XoM for Stripped Binaries without Embedded Data Relocation

  2024influential citation
• What you can read is what you can't execute

  2023cites this paper
• R2C: AOCR-Resilient Diversity with Reactive and Reflective Camouflage

  2023cites this paper
• MProbe: Make the code probing meaningless

  2022cites this paper
• Securely Sharing Randomized Code That Flies

  2021cites this paper
• Tutorial: Investigating Advanced Exploits for System Security Assurance

  2021cites this paper
• A Framework for Automatic Exploit Generation for JIT Compilers

  2021cites this paper
• Making Information Hiding Effective Again

  2021cites this paper
• NoJITsu: Locking Down JavaScript Engines

  2020cites this paper
• Enhancing Randomization Entropy of x86-64 Code while Preserving Semantic Consistency

  2020cites this paper
• Practical Fine-Grained Binary Code Randomization†

  2020cites this paper
• Speculative Probing: Hacking Blind in the Spectre Era

  2020cites this paper
• Preventing Code Reuse Attacks On Modern Operating Systems

  2020cites this paper
• Fine-Grained Isolation to Protect Data against In-Process Attacks on AArch64

  2020cites this paper
• A Survey of Exploitation Techniques and Defenses for Program Data Attacks

  2020cites this paper
• xMP: Selective Memory Protection for Kernel and User Space

  2020cites this paper
• STEROIDS for DOPed Applications: A Compiler for Automated Data-Oriented Programming

  2019cites this paper
• Layered Object-Oriented Programming: Advanced VTable Reuse Attacks on Binary-Level Defense

  2019cites this paper
• Kernel Protection Against Just-In-Time Code Reuse

  2019cites this paper
• Exploitation Techniques and Defenses for Data-Oriented Attacks

  2019cites this paper
• Advanced code reuse attacks against modern defences

  2019cites this paper
• The ROP needle: hiding trigger-based injection vectors via code reuse

  2019cites this paper
• Revisiting the Arm Debug Facility for OS Kernel Security

  2019cites this paper
• SoK: Using Dynamic Binary Instrumentation for Security (And How You May Get Caught Red Handed)

  2019cites this paper
• SafeHidden: An Efficient and Secure Information Hiding Technique Using Re-randomization

  2019cites this paper
• The Leakage-Resilience Dilemma

  2019cites this paper
• Making Code Re-randomization Practical with MARDU

  2019cites this paper
• SGXJail: Defeating Enclave Malware via Confinement

  2019cites this paper
• Measuring Attack Surface Reduction in the Presence of Code (Re-)Randomization

  2019influential citation
• Methodologies for Quantifying (Re-)randomization Security and Timing under JIT-ROP

  2019influential citation
• Preface

  2018cites this paper
• How memory safety violations enable exploitation of programs

  2018cites this paper
• Attacking dynamic code

  2018cites this paper
• Multi-variant execution environments

  2018cites this paper
• Diversity and information leaks

  2018cites this paper
• Techniques to Protect Confidentiality and Integrity of Persistent and In-Memory Data

  2018cites this paper
• Record-Replay Architecture as a General Security Framework

  2018cites this paper
• Compiler-Assisted Code Randomization

  2018cites this paper
• Bytecode Corruption Attacks Are Real - And How to Defend Against Them

  2018cites this paper
• IMIX: In-Process Memory Isolation EXtension

  2018cites this paper
• Position-Independent Code Reuse: On the Effectiveness of ASLR in the Absence of Information Disclosure

  2018influential citation
• Shredder: Breaking Exploits through API Specialization

  2018cites this paper
• Hardware control flow integrity

  2018cites this paper
• Protecting dynamic code

  2018cites this paper
• Function Risk Assessment Under Memory Leakage

  2018cites this paper
• References

  2018cites this paper
• Evaluating control-flow restricting defenses

  2018cites this paper
• JITGuard: Hardening Just-in-time Compilers with SGX

  2017cites this paper
• Defeating Zombie Gadgets by Re-randomizing Code upon Disclosure

  2017cites this paper
• Revisiting Browser Security in the Modern Era: New Data-Only Attacks and Defenses

  2017cites this paper
• Breaking and Fixing Destructive Code Read Defenses

  2017influential citation
• Execution Integrity with In-Place Encryption

  2017cites this paper
• Protecting COTS Binaries from Disclosure-guided Code Reuse Attacks

  2017influential citation
• CodeArmor: Virtualizing the Code Space to Counter Disclosure Attacks

  2017influential citation
• kR^X: Comprehensive Kernel Protection against Just-In-Time Code Reuse

  2017cites this paper
• NORAX: Enabling Execute-Only Memory for COTS Binaries on AArch64

  2017influential citation
• Address Oblivious Code Reuse: On the Effectiveness of Leakage Resilient Diversity

  2017influential citation
• On the Effectiveness of Non-readable Executable Memory Against BROP

  2017cites this paper
• The Dynamics of Innocent Flesh on the Bone: Code Reuse Ten Years Later

  2017cites this paper
• Code Randomization: Haven’t We Solved This Problem Yet?

  2016cites this paper
• Return to the Zombie Gadgets: Undermining Destructive Code Reads via Code Inference Attacks

  2016cites this paper
• Juggling the Gadgets: Binary-level Code Randomization using Instruction Displacement

  2016cites this paper
• Detile: Fine-Grained Information Leak Detection in Script Engines

  2016cites this paper
• On trends in low-level exploitation

  2016cites this paper
• Code-pointer integrity

  2014cites this paper