Breaking Payloads With Runtime Code Stripping and Image Freezing
Explore a novel defensive strategy against memory corruption vulnerabilities in this Black Hat conference talk. Dive into a system that removes unused code from application processes, preventing attacks from accessing unnecessary code and APIs. Learn how this approach operates only during process creation, incurring no runtime overhead or performance degradation. Discover the implementation for Windows 8.1 and its testing on real-world applications. Examine the investigation into code overhead in current applications, and understand the intricacies of code stripping, control flow graph recovery, and image freezing techniques. Gain insights into the advantages, current limitations, and future work involving CFG from the compiler in this comprehensive exploration of breaking payloads through runtime code stripping and image freezing.