3 ms·
What about the opposite direction: create builds from the same source that use different memory layouts to make the life of attackers harder? I think diversity
by lindig 11y ago
What about the opposite direction: create builds from the same source that use different memory layouts to make the life of attackers harder? I think diversity could create resilience, too. Obviously it makes verification harder.
- potatosareok 11y agoThere's various research projects out there to, at compiler level, create different output binaries out of same source code to accomplish this task. I'm not really following it I just remember a professor at my undergrad was recruiting people for his lab on it, and I'm pretty sure his project was not only one. https://ssllab.org/trac/wiki/MultiCompilerPublic https://ssllab.org/trac/wiki/MultiCompilerPublic edit: see compiler/compile-time randomization? see some other similar projects under these key terms.
- chei0aiV 11y agogrsec does this: https://grsecurity.net/ https://grsecurity.net/