Return-oriented Programming Shows Limits of Software Defenses (IMAGE)

University of California - San Diego

Return-oriented Programming Shows Limits of Software Defenses

Caption

If you want to make sure your computer or server is not tricked into undertaking malicious or undesirable behavior, it's not enough to keep bad code out of the system. Two graduate students from UC San Diego's computer science department (L-R Ryan Roemer and Erik Buchanan) have just published work showing that the process of building bad programs from good code using "return-oriented programming" can be automated and that this vulnerability applies to multiple computer architectures.

Credit

UC San Diego Jacobs School of Engineering

Usage Restrictions

mandatory credit: UC San Diego Jacobs School of Engineering

License

Licensed content

Disclaimer: AAAS and EurekAlert! are not responsible for the accuracy of news releases posted to EurekAlert! by contributing institutions or for the use of any information through the EurekAlert system.