基于编译置换的指令随机化系统设计与实现

摘要

Instruction set randomization technology is a new type of defense technology that protects against code injection attacks by random transformation program instruction coding.The existing instruction set randomization technology also has some defects,such as large performance loss,mixed instruction and data can enhance the difficult of encoding.In order to solve these problems,a randomization technique based on compiler permutation was proposed.This technique reduces the number of randomization instructions without reducing the defense effect,and achieves the random replacement of the critical instruction in the compiling process,which improves the performance and coding accuracy of the instruction randomization.This paper designed and implemented compiled instruction randomization emulation based on compiling substitution and verified the effectiveness of the technique.%指令集随机化技术是一种通过随机变换程序指令编码来抵御代码注入攻击的新型防御技术.现有指令集随机化技术还存在一定缺陷,如性能损耗大、指令数据混杂造成的编码难等.针对这些问题,提出一种基于编译置换的指令随机化技术.该技术在不降低防御效果的同时减少了随机化指令的数量,并在编译过程中实现了关键指令的随机置换,提高了指令随机化的性能和编码精确度.设计并实现了一套基于编译置换的指令随机化原型系统,验证了该技术的有效性.