Norax - Enabling Execute-Only Memory for COTS Binaries on AArch64
Explore a comprehensive presentation on Norax, a system that enables Execute-Only Memory (XOM) for Commercial-Off-The-Shelf (COTS) binaries on AArch64 platforms. Delve into the design, implementation, and practical applications of this innovative security solution that retrofits XOM into stripped binaries without requiring source code or debugging symbols. Learn about the challenges faced, core components, and techniques used, including NDisassembler, NPatcher, NLoader, and NMonitor. Examine the evaluation results demonstrating Norax's minimal performance impact and increased memory footprint. Gain insights into how Norax leverages hardware-based XOM support on AArch64 platforms and its compatibility with other binary hardening techniques like in-place randomization (IPR). Understand the significance of this approach in protecting against code reuse attacks and memory disclosure vulnerabilities in COTS binaries and source-unavailable programs.