Nytro Posted May 9, 2011 Report Share Posted May 9, 2011 Address Space Randomization for Mobile DevicesHristo BojinovStanford UniversityDan BonehStanford UniversityRich CanningsGoogle, Inc.Iliyan MalchevGoogle, Inc.ABSTRACTAddress Space Layout Randomization (ASLR) is a defen-sive technique supported by many desktop and server oper-ating systems. While smartphone vendors wish to make itavailable on their platforms, there are technical challengesin implementing ASLR on these devices. Pre-linking, lim-ited processing power and restrictive update processes makeit difficult to use existing ASLR implementation strategieseven on the latest generation of smartphones. In this paperwe introduce retouching, a mechanism for executable ASLRthat requires no kernel modications and is suitable for mo-bile devices. We have implemented ASLR for the Androidoperating system and evaluated its eectiveness and per-formance. In addition, we introduce crash stack analysis,a technique that uses crash reports locally on the device,or in aggregate in the cloud to reliably detect attempts tobrute-force ASLR protection. We expect that retouchingand crash stack analysis will become standard techniques inmobile ASLR implementations.Download:http://bojinov.org/professional/wisec2011-mobileaslr-paper.pdf Quote Link to comment Share on other sites More sharing options...