Wednesday, May 9, 2012

Anti-ROP at Compiler Level on x86 ( for sale )

Anti-ROP can be made by extra 3 instructions per call-ret  pair instructions on x86.

These extra 3 instructions must be inserted at compile time by compiler.

Of course , performance degrade will occur by 3 extra instructions.

But 3 extra instructions cause small performance degrade.

And, theoretically bypassing method  exist .

But It is more difficult simultaneously exploit and bypass.

So All practical ROP exploit publicly available are mitigated by this anti-ROP technique.

If you are interested in this idea, send an email to  ohojang@gmail.com

Thanks.




No comments:

Post a Comment