SoK: Make JIT-Spray Great Again
https://www.usenix.org/system/files/conference/woot18/woot18-paper-gawlik.pdf [www.usenix.org]
2018-11-15 21:01
In this paper, we survey and systematize the jungle of JIT compilers of major (client-side) programs, and provide a categorization of offensive techniques for abusing JIT compilation. Thereby, we present techniques used in academic as well as in non-academic works which try to break various defenses against memory-corruption vulnerabilities. Additionally, we discuss what mitigations arouse to harden JIT compilers to impede exploitation by skilled attackers wanting to abuse Just-In-Time compilers.