Finding code reuse attacks is a mandatory step for exploiting software vulnerabilities in the real world. In this talk, Ed will explain the history of defenses that led to the creation of code reuse attacks, and a gentle introduction to one of the most well-known examples, Return-Oriented Programming (ROP). He will briefly introduce some of his own research, which measures how much code an attacker needs access to in order to perform such attacks. (Short answer: very little.) Finally, he will explain some of the concrete actions that developers can take to harden their software against code reuse attacks on a variety of platforms.
