Building Secure Defenses Against Code-Reuse Attacks

This book provides an in—depth look at return—oriented programming attacks. It explores several conventional return—oriented programming attacks and analyzes the effectiveness of defense techniques including address space layout randomization (ASLR) and the control—flow restrictions implemented in security watchdogs such as Microsoft EMET.

Chapters also explain the principle of control—flow integrity (CFI), highlight the benefits of CFI and discuss its current weaknesses. Several improved ...