We present an approach and a tool to answer the need for effective, generic, and easily
applicable protections against side-channel attacks. The protection mechanism is based on …

Since the end of the 20th century, it has become clear that web browsers will play a crucial
role in accessing Internet resources such as the World Wide Web. They evolved into …

Memory-safety attacks have been one of the most critical threats against computing systems.
Although a wide-range of defense techniques have been developed against these attacks …

Spraying is a common payload delivery technique used by attackers to execute arbitrary
code in presence of Address Space Layout Randomisation (ASLR). In this paper we present …

JIT spraying allows an attacker to subvert a Just-In-Time compiler, introducing instruction
sequences useful to the attacker into executable regions of the victim program's address …

Language Virtual Machines (VMs) are the run-time environment of popular high level
managed languages. They offer portability and memory handling for the developer and are …

With the advent of JIT compilers, code-injection attacks have seen a revival in the form of JIT
spraying. JIT spraying enables an attacker to inject gadgets into executable memory …

Heap spraying is probably the most simple and effective memory corruption attack, which
fills the memory with malicious payloads and then jumps at a random location in hopes of …

Just-in-Time compilers offer substantial runtime performance benefits over traditional
execution methods like interpretation; and they have enjoyed widespread deployment in the …

Code-reuse attacks are notoriously hard to defeat, and many current solutions to the
problem focus on automated software diversity. This is a promising area of research, as …