Automatically Validating the Effectiveness of Software Diversity Schemes
Daniel M. Kelly, Christopher C. Wellons, Joel Coffman, Andrew S. Gearhart · 2019
Software diversity promises to invert the current balance of power in cybersecurity by preventing exploit reuse. Nevertheless, the comparative evaluation of diversity techniques has received scant attention. In ongoing work, we use the DARPA Cyber Grand Challenge (CGC) environment to assess the effectiveness of diversifying compilers in mitigating exploits. Our approach provides a quantitative comparison of diversity strategies and demonstrates wide variation in their effectiveness.