What technique makes it difficult for attackers to predict the memory address space location for code execution?

Address Space Layout Randomization (ASLR) is a computer security technique that involves randomly arranging the positions of key data areas in a process's virtual memory. These areas include the base of the executable and the positions of the stack, heap, and libraries. This randomization makes it significantly more difficult for an attacker to predict target addresses for exploits, such as buffer overflows, that require knowing the location of executable code. By changing memory locations every time a program is run, ASLR mitigates certain types of security attacks by preventing attackers from reliably jumping to a specific exploited function or gadget.

A. Security Cookies: A synonym for stack canaries; they are used to detect stack corruption, not to randomize memory addresses.

B. DFP: This is not a standard acronym for a memory protection technique related to address randomization.

C. SLMOP: This is not a standard acronym for a memory protection technique related to address randomization.

E. Stack Canaries: These are known values placed on the stack to detect buffer overflows upon function return, not a method for randomizing memory layout.

1. Shacham

H.

Page

M.

Pfaff

B.

Goh

E. J.

Modadugu

N.

& Boneh

D. (2004). On the effectiveness of address-space randomization. Proceedings of the 11th ACM conference on Computer and communications security

298-307. (See Section 2

"Address-Space Randomization

" p. 299 for a detailed description of the technique). DOI: https://doi.org/10.1145/1030083.1030124

2. Microsoft Corporation. (2023). Address Space Layout Randomization (ASLR). Microsoft Learn. (The entire document describes how ASLR works to "randomly load the process images into memory" to mitigate exploits). Retrieved from Microsoft's official documentation on Windows security features.

3. Kaashoek

M. F.

& Zeldovich

N. (2014). Lecture 4: Control-Flow Hijacking. MIT OpenCourseWare

6.858 Computer Systems Security

Fall 2014. (Section "Defenses: randomization" explicitly details ASLR as a technique to "Randomize location of stack

heap

code

libraries in address space").