R2C: AOCR-Resilient Diversity with Reactive and Reflective Camouflage
Felix Berlakovich, Stefan Brunthaler · 2023
Address-oblivious code reuse, AOCR for short, poses a substantial security risk, as it remains unchallenged. If neglected, adversaries have a reliable way to attack systems, offering an operational and profitable strategy. AOCR's authors conclude that software diversity cannot mitigate AOCR, because it exposes fundamental limits to diversification.