On Protection by Layout Randomization

Abstract—Layout randomization is a powerful, popular technique for software protection. We present it and study it in programming-language terms. More specifically, we consider layout randomization as part of an implementation for a highlevel programming language; the implementation translates this language to a lower-level language in which memory addresses are numbers. We analyze this implementation, by relating low-level attacks against the implementation to contexts in the high-level programming language, and by establishing traction results.

• Type: Conference
• Year: 2010
• Where: CSFW
• Authors: Martín Abadi, Gordon D. Plotkin
• Keywords: CSFW 2010, Implementation, Layout Randomization, Programming Language, Security Privacy