Re: ROP attack mitigation

2019-05-13 Thread Zack Vu
Given that essentially no CPUs today support CET and given that CPUs remain deployed for perhaps 10 years, even more considering that CPU performance has plateaued, isn't there a moral imperative to mitigate ROP attacks using approaches other than just CET? The two I mentioned would help in the sho

ROP attack mitigation

2019-05-10 Thread Zack Vu
Hi all, Every year there are new vulnerabilities, and some of them are possible because of ROP attacks. There are a couple things that come to mind to thwart ROP attacks that would rely on compiler changes in particular, instead of a kernel change or hardware change. I was wondering if anyone in