An Analysis of Return-oriented Programming
Anders Flatem · NORA - Norwegian Open Research Archives · 2019
Return-oriented programming is a powerful and versatile code-reuse attack.In this thesis we attempt to do an analysis of the functionality of return-oriented programming.We cover what return-oriented programming is, how it came to be and what requirements there are to be able to execute an attack.We also take a look at which mitigations currently exist to stop return-oriented programming and which mitigations have been proposed.We try to make a judgement about their effectiveness and practicality.Finally we take a look at some more advanced forms of returnoriented programming called return-oriented programming without returns and blind return oriented programming.iii