On Return Oriented Programming Threats in Android Runtime

摘要: Android has taken a large share of operating systems for smart devices including smartphones, and been an attractive target to the attackers. The arms race between attackers defenders typically occurs on two front lines — latest attacking technology updates system (including defense mechanisms deployed). In terms technology, Return-Oriented Programming (ROP) is one most sophisticated attack methods devices. updates, Runtime (ART) was biggest change family. this paper, we investigate extent which makes attacks easier or more difficulty. particular, show that by updating libraries adopting Ahead-of-Time compiling instead Justin- Time in ART architecture, larger number diverse gadgets are disclosed ROP attackers, serve as direct ingredients attacks. We three six times found adopted versions due new runtime. Moreover, constrained situations where attacker requires specific instructions registers, running provides up 30% conditional coverage than pre-ART does. additionally demonstrate sample post- would not have possible Android.