A Survey of Return-Oriented Programming Attack, Defense and Its Benign Use

• Published in: 2018 13th Asia Joint Conference on Information Security (AsiaJCIS) pp. 83 - 88
• Main Authors: Wang, Jingyuan, Xie, Peidai, Wang, Yongjun, Rong, Zelin
• Format: Conference Proceeding
• Language: English
• Published: IEEE 01.08.2018
• Subjects: Benign Use of ROP; Code Reuse Attack; Computer security; Frequency control; Layout; Programming; Registers; Return-Oriented Programming; ROP Defense; Software
• DOI: 10.1109/AsiaJCIS.2018.00022

The return-oriented programming(ROP) attack has been a common access to exploit software vulnerabilities in the modern operating system(OS). An attacker can execute arbitrary code with the aid of ROP despite security mechanisms are involved in OS. In order to mitigate ROP attack, defense mechanisms are also drawn researchers' attention. Besides, research on the benign use of ROP become a hot spot in recent years, since ROP has a perfect resistance to static analysis, which can be adapted to hide some important code. The results in benign use also benefit from a low overhead on program size. The paper discusses the concepts of ROP attack as well as extended ROP attack in recent years. Corresponding defense mechanisms based on randomization, frequency, and control flow integrity are analyzed as well, besides, we also analyzed limitations in this defense mechanisms. Later, we discussed the benign use of ROP in steganography, code integrity verification, and software watermarking, which showed the significant promotion by adopting ROP. At the end of this paper, we looked into the development of ROP attack, the future of possible mitigation strategies and the potential for benign use.