http://www.dagstuhl.de/15294

July 12 – 15 , 2015, Event 15294

The Continuing Arms Race: Code-Reuse Attacks and Defenses

Organizers

Ulfar Erlingsson (Google Inc. – Mountain View, US)
Thorsten Holz (Ruhr-Universität Bochum, DE)
Per Larsen (University of California – Irvine, US)
Ahmad-Reza Sadeghi (TU Darmstadt, DE)

For support, please contact

Heike Clemens

Documents

Shared Documents
Event Wiki
Event Schedule [pdf]

(Use seminar number and access code to log in)

The Continuing Arms Race: Code-Reuse Attacks and Defenses

Code reuse attacks pose a severe threat to modern software, silently breaching and infecting various systems ranging from desktop PCs to mobile and embedded systems. They can bypass many deployed defenses including data execution prevention and memory randomization (ASLR). The design and development of practical and effective defenses against code reuse attacks is extremely challenging and has recently become a hot research topic. Code-reuse with its most prominent instantiation return-oriented programming (ROP) may seem like a solved problem given the high scores of papers on possible defenses recently published on established security conferences. Unfortunately, many proposed defenses make assumptions that a sufficiently determined and resourced attacker can skirt, or require system changes that are highly challenging to transfer into practice; and frequently both.

This seminar will bring together researchers and practitioners to analyze the state-of-the-art in code reuse attacks and mitigations, to devise improved approaches, and to establish a roadmap for future research and practice.

Keywords Code-reuse attacks, code-reuse mitigations, return-oriented programming, control-flow integrity, software diversity, compilation, binary rewriting, JIT-compilation, operating systems, browsers

Online Publications

We offer several possibilities to publish the results of your event. Please contact marc.herbstritt(at)dagstuhl.de if you are interested.

Dagstuhl's Impact

Please inform us when a publication was published as a result from your seminar. These publications are listed in the category Dagstuhl's Impact and are presented on a special shelf in the library.