计算机应用与软件2026，Vol.43Issue(3)：314-321,330,9.DOI:10.3969/j.issn.1000-386x.2026.03.043
面向细粒度随机化的ROP攻击响应方案
ROP ATTACK RESPONSE SCHEME ORIENTED TO FINE-GRAINED RANDOMIZATION
摘要
Abstract
Return-oriented programming attack(ROP)can bypass data execute disable(DEP)defense and pose a major threat to software security.ROP detection methods on runtime induce the false positives and false negatives,and it is difficult to infer ROP attacks from the context information of program crashes.Therefore,this paper proposes a ROP attack response scheme oriented to fine-grained randomization.In this scheme,an exception capture component was embedded in the program to capture rich crash context information in time.Meanwhile,15 ROP attack indicators associated with ROP payloads and attack modes were designed.This scheme used simulated attack instances and real vulnerability instances to verify the scheme indicators,used fuzzy testing to verify the attack differences of the indicators,and proposed ROP attack utilization modes for different vulnerability types.This scheme built a bridge between fine-grained randomization security mechanism and rapid response to ROP attacks.关键词
ROP攻击/随机化/攻击响应/崩溃分析Key words
ROP attack/Randomization/Attack response/Crash analysis分类
信息技术与安全科学引用本文复制引用
傅建明,张婉芝,解梦飞..面向细粒度随机化的ROP攻击响应方案[J].计算机应用与软件,2026,43(3):314-321,330,9.基金项目
国家自然科学基金项目(61972297,62172308) （61972297,62172308）
国家重点研发计划项目(2021YFB3101201). （2021YFB3101201）
