WCU / Cybersecurity
HomeCSC 471CSC 472Search /
~/CSC 471/Class 09/KP 23
Class 09 · KP 23 / 25

Detection: The Arms Race

the exploit ↔ mitigation arms raceoverflowattackNX / DEPdefenseROP / ret2libcattackASLRdefenseinfo leakattackcanary / RELROdefenseCFI / CETattack
Each attack technique provoked a defense; each defense provoked a new attack.
Key Takeaway

Every stealth trick eventually meets a structural defense. Attackers respond by moving lower (firmware) or abusing trust (stolen certs) — the game never ends.

PreviousDetection: Memory Forensics and HardeningNextLab 5: Build a Linux LKM Rootkit