3 papers
cs.CR2020
Breaking and Fixing Destructive Code Read Defenses
Jannik Pewny, Philipp Koppe, Lucas Davi +1
Just-in-time return-oriented programming (JIT-ROP) is a powerful memory corruption attack that bypasses various forms of code randomization. Execute-only memory (XOM) can potential…
cs.CR2020
EvilCoder: Automated Bug Insertion
Jannik Pewny, Thorsten Holz
The art of finding software vulnerabilities has been covered extensively in the literature and there is a huge body of work on this topic. In contrast, the intentional insertion of…
cs.CR2020
Steroids for DOPed Applications: A Compiler for Automated Data-Oriented Programming
Jannik Pewny, Philipp Koppe, Thorsten Holz
The wide-spread adoption of system defenses such as the randomization of code, stack, and heap raises the bar for code-reuse attacks. Thus, attackers utilize a scripting engine in…