Guarder: a tunable secure allocator

摘要: Due to the on-going threats posed by heap vulnerabilities, we design a novel secure allocator—GUARDER—to defeat these vulnerabilities. GUARDER is different from existing secure allocators in the following aspects. Existing allocators either have low/zero randomization entropy, or cannot provide stable security guarantees, where their entropies vary by object size classes, execution phases, inputs, or applications. GUARDER ensures the desired randomization entropy, and provides an unprecedented level of security …