Live briefing
Everything about Address space layout randomization
Computer security technique
Address space layout randomization (ASLR) is a computer security technique involved in preventing exploitation of memory corruption vulnerabilities. In order to prevent an attacker from reliably redirecting code execution to a particular exploited function in memory, ASLR randomly arranges the address space positions of key data areas of a process, including the base of the executable and the positions of the stack, heap and libraries. When applied to the kernel, this technique is called kernel address space layout randomization (KASLR). Wikipedia →
🧠Start here: a 6-step reading path
- Read the overview: Address space layout randomizationA 5-minute orientation
- Pick up a classic book: Intelligence BulletinThe most-reprinted book on the subject
- Read the landmark paper: Address Space Layout Randomization Next GenerationCited 38 times
- Go sideways: Executable-space protectionA closely related topic
- Go sideways: Kernel page-table isolationA closely related topic
đź“– Definitions
No dictionary entry for this exact phrase.
🗂️ The subject at a glance
🏆 Landmark papers (most cited)
Address Space Layout Randomization Next Generation
KASLR-MT: Kernel Address Space Layout Randomization for Multi-Tenant cloud systems
Address-space layout randomization using code islands
Protecting against address space layout randomisation (ASLR) compromises and return-to-libc attacks using network intrusion detection systems
Fine-Grained Address Space Layout Randomization on Program Load
Fine-grained address space layout randomization on program load
đź“š Books worth reading
Intelligence BulletinUnited States. War Department. Military Intelligence Service · 1942
Intelligent Technologies and Engineering SystemsJengnan Juang · 2013
Introduction to making very big booksUnited States. Congress. Senate. Committee on Pensions · 2011
Learn Excel 2007 through Excel 2010 from Mr. ExcelBill Jelen · 2011
Ranked by number of editions on Open Library, a rough measure of how lasting a book is.
đź”— Related topics
- Executable-space protection In computer security, executable-space protection marks memory regions as non-executable, such that an attempt to execute machine code in these regions…
- Kernel page-table isolation Kernel page-table isolation (KPTI or PTI, previously called KAISER) is a Linux kernel feature that mitigates the Meltdown security vulnerability (affecting…
- Exec Shield Exec Shield is a project started at Red Hat, Inc in late 2002 with the aim of reducing the risk of worm or other automated remote attacks on Linux systems…
- Heap overflow A heap overflow, heap overrun, or heap smashing is a type of buffer overflow that occurs in the heap data area. Heap overflows are exploitable in a different…
- /dev/random In Unix-like operating systems, /dev/random and /dev/urandom are special files that provide random numbers from a cryptographically secure pseudorandom…
- W^X W^X (write xor execute, pronounced W xor X) is a security policy in operating systems and software frameworks. It implements executable-space protection…
- Sigreturn-oriented programming Sigreturn-oriented programming (SROP) is a computer security exploit technique that allows an attacker to execute code in presence of security measures…
- Meltdown (security vulnerability) Meltdown is one of the two original speculative execution CPU vulnerabilities (the other being Spectre). Meltdown affects Intel x86 microprocessors, IBM…