WCU / Cybersecurity
~/CSC 472/Class 07/KP 16
Class 07 · KP 16 / 18

Attacker vs Defender: The Arms Race

the exploit ↔ mitigation arms raceoverflowattackNX / DEPdefenseROP / ret2libcattackASLRdefenseinfo leakattackcanary / RELROdefenseCFI / CETattack
Each attack technique provoked a defense; each defense provoked a new attack.

{ Purple = defense, orange = attack response. Each defense

raises cost; none is a silver bullet alone. Depth (defense-in-depth) is the

point.}