Journal of South China University of Technology(Natural Science Edition) ›› 2019, Vol. 47 ›› Issue (6): 31-38.doi: 10.12141/j.issn.1000-565X.180255

• Computer Science & Technology • Previous Articles     Next Articles

Automatic Generation of Multi-modules ROP Based on Static Instructions Assignment

HUANG Ning HUANG Shuguang HUANG Hui DENG Zhaokun    

  1. School of Electronic Warfare，National University of Defense Technology，Hefei 230037，Anhui，China 
  • Received:2017-12-20 Revised:2019-01-20 Online:2019-06-25 Published:2019-05-05
  • Contact: 黄宁(1990-)，男，博士生，主要从事软件漏洞分析研究． E-mail:809848161@qq.com
  • About author:黄宁(1990-)，男，博士生，主要从事软件漏洞分析研究．
  • Supported by:
    Supported by the National Key Research and Development Program“Cyberspace Security”(2017YFB0802905) 

PDF

679

Abstract: Return Oriented Programming (ROP) is a kind of technology to bypass the Data Execution Prevention (DEP)． Existing technologies for automatic ROP generation can not optimize the progress of instructions assign- ment for modules switching in multi-modules ROP payload，leading to the problem of large amounts of memory space are occupied． In order to solve this problem，a new static instructions assignment rule SIA for ROP modules switching was designed based on the automatic ROP generation system Q． SIA constructs intermediate sequence of instructions by static instructions assignment，and finds the address and modifies the pointers by dynamic data fill- ing． Experimental results show that，compared with the existing technologies，the multi-modules ROP payload gen- erated by SIA needs less memory space so that improve the practicability of ROP．

Key words: return oriented programming, data execution prevention, static instructions assignment, multi-mod- ules ROP

CLC Number: