~/CSC 472/Class 05

CSC 472 · Class 05

Exploit Mitigations and Modern Defenses

19 knowledge points. Work through them in order, or jump to any topic.

//

Knowledge Points

01Where We Are: From Offense to Defense → 02The Layered Defense Model → 03The Mitigation Arms Race → 04NX / DEP: No Execute → 05NX: Bypass and Cost → 06ASLR: Address Space Layout Randomization → 07PIE vs non-PIE → 08ASLR: The Weakness — Information Leaks → 09Stack Canaries (Stack Protector) → 10Canaries: Flags and Limitations → 11RELRO: Protecting the GOT → 12FORTIFY_SOURCE and Safer libc → 13Control-Flow Integrity (CFI) → 14Intel CET: Shadow Stack + IBT → 15Sandboxing, seccomp, and Memory-Safe Languages → 16Reading {checksec → 17Interpreting the Fields: Attack Plan → 18Summary Table: Mitigation vs Bypass → 19Wrap-Up: The Defense Map for the Rest of the Course →