COMPARISON AND IMPROVEMENTS FOR EXISTING JUMP ORIENTED PROGRAMMING TOOLS

No ratings

Presented at ruxcon 2017 by

John Dunlap

Return Oriented Programming is the go-to method for bypassing modern software memory protections. Mitigations from major hardware and software manufacturers will eventually destroy the viability of this technique. Jump Oriented Programming (“JOP”) represents a viable alternative to return oriented programming, that may be more resistant to mitigations. However, tooling has not caught up to Jump Oriented programming. In this talk security researcher John Dunlap will discuss the technique, as well as a comparison of tools used to achieve it. In the talk John will also present his own tools for detecting and analyzing Jump Oriented Programming “gadgets.”