| Publisher | Association for Computing Machinery | ||
|---|---|---|---|
| Format | 193.0KB PDF | Date added | 31 Oct 2008 |
| Topics | Programming Languages, RISC-Based Servers | ||
| Downloads | 2 | ||
This paper reconsiders the threat posed by Shacham's "Return-oriented programming" - a technique by which OX-style hardware protections are evaded via carefully crafted stack frames that divert control flow into the middle of existing variable-length x86 instructions - creating short new instructions streams that then return. The paper believes this attack is both more general and a greater threat than the author appreciated. In fact, the vulnerability is not limited to the x86 architecture or any particular operating system, is readily exploitable, and bypasses an entire category of malware protections. This paper demonstrates general return-oriented programming on the SPARC, a fixed instruction length RISC architecture with structured control flow.
Did you find this white paper useful?
9 out of 18 users found this white paper useful
Related white papers
Ajax: For Graphics-Intensive Web Applications
Ajax (which stands for asynchronous JavaScript and XHTML) is not a technology per se, but rather a design approach for Web applications. Ajax improves the user's Web application experience while...
Citizants: Bringing IT In-House
Citizant enhances IT flexibility and scalability by creating a virtualized Dell infrastructure that will pay for itself in 18 months.
Designing High Availability for Internet Information Services
End downtime forever! - Organizations today are relying more and more on Web services for the implementation of mission-critical applications. With the advent of Service-Oriented Architectures (SOAs),which make extensive use...
Five JavaScript Frameworks: A Point-by-Point Comparison
There are a multitude of JavaScript frameworks available today for programming rich client-side interactions in web applications. With many such different options, it is important to choose a framework that...
Increase Reliability with IBM WebSphere File Transfer Edition (FTE)
"Does your organization still use FTP software? Did you know these links require 3 to 4 times more time and effort to build and maintain versus SOA-based Application Integration projects?...
Software Engineering Today - Best Practices & Patterns
This is the final webcast in the 15 part series ?Modern Software Development in .NET Using Visual Basic?. Developers shouldn?t miss this opportunity to examine the following topics with renowned...
Video-Centric Network Coding Strategies for 4G Wireless Networks: An Overview
The impact of Internet content and IP based television on networks is growing. Video is now ubiquitous in the home and on the street. It demands new approaches to video...
