{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,17]],"date-time":"2026-07-17T23:17:04Z","timestamp":1784330224759,"version":"3.55.0"},"publisher-location":"New York, NY, USA","reference-count":39,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,12,2]],"date-time":"2024-12-02T00:00:00Z","timestamp":1733097600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc-sa\/4.0\/"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,12,2]]},"DOI":"10.1145\/3658644.3690239","type":"proceedings-article","created":{"date-parts":[[2024,12,9]],"date-time":"2024-12-09T12:19:20Z","timestamp":1733746760000},"page":"1360-1374","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":11,"title":["The Illusion of Randomness: An Empirical Analysis of Address Space Layout Randomization Implementations"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-7476-0166","authenticated-orcid":false,"given":"Lorenzo","family":"Binosi","sequence":"first","affiliation":[{"name":"Politecnico di Milano, Milano, Italy"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0008-1585-6844","authenticated-orcid":false,"given":"Gregorio","family":"Barzasi","sequence":"additional","affiliation":[{"name":"Politecnico di Milano, Milano, Italy"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8284-6074","authenticated-orcid":false,"given":"Michele","family":"Carminati","sequence":"additional","affiliation":[{"name":"Politecnico di Milano, Milano, Italy"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4710-5283","authenticated-orcid":false,"given":"Stefano","family":"Zanero","sequence":"additional","affiliation":[{"name":"Politecnico di Milano, Milano, Italy"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0925-2306","authenticated-orcid":false,"given":"Mario","family":"Polino","sequence":"additional","affiliation":[{"name":"Politecnico di Milano, Milano, Italy"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2024,12,9]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1109\/TIT.2016.2620435"},{"key":"e_1_3_2_1_2_1","volume-title":"Looney Tunables: Local Privilege Escalation in the glibc's ld.so (CVE-2023--4911). qualys.com (Oct","author":"Advisory Qualys Security","year":"2023","unstructured":"Qualys Security Advisory. 2023. Looney Tunables: Local Privilege Escalation in the glibc's ld.so (CVE-2023--4911). qualys.com (Oct 2023). https:\/\/www.qualys.com\/2023\/10\/03\/cve-2023--4911\/looney-tunables-local-privilege-escalation-glibc-ld-so.txt"},{"key":"e_1_3_2_1_3_1","volume-title":"Android Scudo Heap Allocator. source.android.com (Apr","year":"2024","unstructured":"Android. 2024. Android Scudo Heap Allocator. source.android.com (Apr 2024). https:\/\/source.android.com\/docs\/security\/test\/scudo"},{"key":"e_1_3_2_1_4_1","volume-title":"About the security content of macOS Big Sur 11.2.1, macOS Catalina 10.15.7 Supplemental Update, and macOS Mojave 10.14.6. support.apple.com (Feb","year":"2021","unstructured":"Apple. 2021. About the security content of macOS Big Sur 11.2.1, macOS Catalina 10.15.7 Supplemental Update, and macOS Mojave 10.14.6. support.apple.com (Feb 2021). https:\/\/support.apple.com\/en-ca\/103058"},{"key":"e_1_3_2_1_5_1","volume-title":"MacOS Virtual Address Translation. opensource.apple.com (Jul","year":"2024","unstructured":"Apple. 2024. MacOS Virtual Address Translation. opensource.apple.com (Jul 2024). https:\/\/opensource.apple.com\/source\/xnu\/xnu-7195.81.3\/osfmk\/arm64\/proc_reg.h.auto.html"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1109\/CCST.2013.6922073"},{"key":"e_1_3_2_1_7_1","volume-title":"The Illusion of Randomness: An Empirical Analysis of Address Space Layout Randomization Implementations. arXiv preprint arXiv:2408.15107","author":"Binosi Lorenzo","year":"2024","unstructured":"Lorenzo Binosi, Gregorio Barzasi, Michele Carminati, Stefano Zanero, and Mario Polino. 2024. The Illusion of Randomness: An Empirical Analysis of Address Space Layout Randomization Implementations. arXiv preprint arXiv:2408.15107 (2024)."},{"key":"e_1_3_2_1_8_1","volume-title":"Top 50 Products By Total Number Of Distinct Vulnerabilities. cvedetails.com (Jul","year":"2024","unstructured":"CVEdetails.com. 2024. Top 50 Products By Total Number Of Distinct Vulnerabilities. cvedetails.com (Jul 2024). https:\/\/www.cvedetails.com\/top-50-products.php"},{"key":"e_1_3_2_1_9_1","first-page":"26","article-title":"Address Space Layout Randomization Comparative Analysis on Windows 10 and Ubuntu 18.04 LTS","volume":"7","author":"D\u00edaz Raquel V\u00e1zquez","year":"2021","unstructured":"Raquel V\u00e1zquez D\u00edaz, Marti no Rivera-Dourado, Rub\u00e9n P\u00e9rez-Jove, Pilar Vila Avenda no, and Jos\u00e9 M V\u00e1zquez-Naya. 2021. Address Space Layout Randomization Comparative Analysis on Windows 10 and Ubuntu 18.04 LTS. Engineering Proceedings, Vol. 7, 1 (2021), 26.","journal-title":"Engineering Proceedings"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICC.2014.6883394"},{"key":"e_1_3_2_1_11_1","volume-title":"Pilar Vila Avenda\u00f1o, and Jos\u00e9 M. V\u00e1zquez-Naya","author":"D\u00edaz Raquel V\u00e1zquez","year":"2019","unstructured":"Raquel V\u00e1zquez D\u00edaz, Marti\u00f1o Rivera-Dourado, Rub\u00e9n P\u00e9rez-Jove, Pilar Vila Avenda\u00f1o, and Jos\u00e9 M. V\u00e1zquez-Naya. 2019. ASLR analyzer. GitHub (2019). https:\/\/github.com\/raquelvqz\/aslr\/"},{"key":"e_1_3_2_1_12_1","volume-title":"Breaking 64 bit aslr on Linux x86--64. googleprojectzero.blogspot.com (Jan","author":"Gro\u00df Samuel","year":"2021","unstructured":"Samuel Gro\u00df. 2021. Breaking 64 bit aslr on Linux x86--64. googleprojectzero.blogspot.com (Jan 2021). https:\/\/googleprojectzero.blogspot.com\/2020\/01\/remote-iphone-exploitation-part-2.html"},{"key":"e_1_3_2_1_13_1","volume-title":"Effective Entropy: Security-Centric Metric for Memory Randomization Techniques. In 7th Workshop on Cyber Security Experimentation and Test, CSET '14","author":"Herlands William","year":"2014","unstructured":"William Herlands, Thomas Hobson, and Paula J. Donovan. 2014. Effective Entropy: Security-Centric Metric for Memory Randomization Techniques. In 7th Workshop on Cyber Security Experimentation and Test, CSET '14, San Diego, CA, USA, August 18, 2014, Chris Kanich and Patrick Lardieri (Eds.). USENIX Association. https:\/\/www.usenix.org\/conference\/cset14\/workshop-program\/presentation\/herlands"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.3390\/E21060623"},{"key":"e_1_3_2_1_15_1","volume-title":"Attacking the Linux PRNG On Android: Weaknesses in Seeding of Entropic Pools and Low Boot-Time Entropy. In 8th USENIX Workshop on Offensive Technologies, WOOT '14","author":"Kaplan David","year":"2014","unstructured":"David Kaplan, Sagi Kedmi, Roee Hay, and Avi Dayan. 2014. Attacking the Linux PRNG On Android: Weaknesses in Seeding of Entropic Pools and Low Boot-Time Entropy. In 8th USENIX Workshop on Offensive Technologies, WOOT '14, San Diego, CA, USA, August 19, 2014,, Sergey Bratus and Felix \"FX\" Lindner (Eds.). USENIX Association. https:\/\/www.usenix.org\/conference\/woot14\/workshop-program\/presentation\/kaplan"},{"key":"e_1_3_2_1_16_1","volume-title":"LibC: Malloc Tunable Parameters. gnu.org (Jan","author":"The","year":"2023","unstructured":"The kernel development community. 2023. LibC: Malloc Tunable Parameters. gnu.org (Jan 2023). https:\/\/www.gnu.org\/software\/libc\/manual\/2.37\/html_mono\/libc.html#Malloc-Tunable-Parameters"},{"key":"e_1_3_2_1_17_1","volume-title":"Memory Management APIs Documentation. kernel.org (Jan","author":"The","year":"2023","unstructured":"The kernel development community. 2023. Memory Management APIs Documentation. kernel.org (Jan 2023). https:\/\/www.kernel.org\/doc\/html\/v6.0\/core-api\/mm-api.html"},{"key":"e_1_3_2_1_18_1","volume-title":"pthread_create(3) - Linux Manual. man7.org (Jan","author":"Kerrisk Michael","year":"2023","unstructured":"Michael Kerrisk. 2023. pthread_create(3) - Linux Manual. man7.org (Jan 2023). https:\/\/man7.org\/linux\/man-pages\/man3\/pthread_create.3.html"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2014.34"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2006.10"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1007\/978--3--319-01604--7_40"},{"key":"e_1_3_2_1_22_1","volume-title":"Proceedings of the In-Depth Security Conference.","author":"Marco-Gisbert Hector","year":"2014","unstructured":"Hector Marco-Gisbert and Ismael Ripoll. 2014. On the Effectiveness of Full-ASLR on 64-bit Linux. In Proceedings of the In-Depth Security Conference."},{"key":"e_1_3_2_1_23_1","volume-title":"ASLRA - ASLR Analyzer. cybersecurity.upv.es (Apr","author":"Gisbert Hector Marco","year":"2016","unstructured":"Hector Marco Gisbert and Ismael Ripoll. 2016. ASLRA - ASLR Analyzer. cybersecurity.upv.es (Apr 2016). https:\/\/web.archive.org\/web\/20230306172439\/http:\/\/cybersecurity.upv.es\/tools\/aslra\/aslr-analyzer.html"},{"key":"e_1_3_2_1_24_1","volume-title":"Exploiting Linux and PaX ASLRtextquoterights weaknesses on 32-bit and 64-bit systems. BlackHat Asia (29","author":"Gisbert Hector Marco","year":"2016","unstructured":"Hector Marco Gisbert and Ismael Ripoll. 2016. Exploiting Linux and PaX ASLRtextquoterights weaknesses on 32-bit and 64-bit systems. BlackHat Asia (29 March 2016)."},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.3390\/app9142928"},{"key":"e_1_3_2_1_26_1","volume-title":"nemenmanlab.org","author":"Nemenman Ilya","year":"2012","unstructured":"Ilya Nemenman. 2012. Nemenman-Shafee-Bialek (NSB) Entropy Estimator. nemenmanlab.org (2012). https:\/\/nemenmanlab.org\/ ilya\/index.php\/Entropy_Estimation"},{"key":"e_1_3_2_1_27_1","volume-title":"NIPS 2001","author":"Nemenman Ilya","year":"2001","unstructured":"Ilya Nemenman, F. Shafee, and William Bialek. 2001. Entropy and Inference, Revisited. In Advances in Neural Information Processing Systems 14 [Neural Information Processing Systems: Natural and Synthetic, NIPS 2001, December 3--8, 2001, Vancouver, British Columbia, Canada],, Thomas G. Dietterich, Suzanna Becker, and Zoubin Ghahramani (Eds.). MIT Press, 471--478. https:\/\/proceedings.neurips.cc\/paper\/2001\/hash\/d46e1fcf4c07ce4a69ee07e4134bcef1-Abstract.html"},{"key":"e_1_3_2_1_28_1","volume-title":"Breaking 64 bit aslr on Linux x86--64. github.com (Nov","year":"2021","unstructured":"nick0ve. 2021. Breaking 64 bit aslr on Linux x86--64. github.com (Nov 2021). https:\/\/github.com\/nick0ve\/how-to-bypass-aslr-on-linux-x86_64"},{"key":"e_1_3_2_1_29_1","volume-title":"nvd.nist.gov (Jan","author":"Sudoedit","year":"2021","unstructured":"nvd.nist.gov. 2021. Sudoedit CVE-2021--3156. nvd.nist.gov (Jan 2021). https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2021--3156"},{"key":"e_1_3_2_1_30_1","volume-title":"CVE security vulnerability database. Security vulnerabilities, exploits. CVE security vulnerability database. Security vulnerabilities, exploits, references and more. (Aug","author":"Scorecard Security","year":"2023","unstructured":"Security Scorecard. 2023. CVE security vulnerability database. Security vulnerabilities, exploits. CVE security vulnerability database. Security vulnerabilities, exploits, references and more. (Aug 2023). https:\/\/www.cvedetails.com\/vulnerabilities-by-types.php"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1002\/J.1538--7305.1948.TB01338.X"},{"key":"e_1_3_2_1_32_1","volume-title":"Desktop Operating System Market Share Worldwide. StatCounter Global Stats (Aug","author":"Stats Statcounter Global","year":"2023","unstructured":"Statcounter Global Stats. 2023. Desktop Operating System Market Share Worldwide. StatCounter Global Stats (Aug 2023). https:\/\/gs.statcounter.com\/os-market-share\/desktop\/worldwide"},{"key":"e_1_3_2_1_33_1","volume-title":"Memory Folios commit. github.com (Nov","author":"Torvalds Linus","year":"2021","unstructured":"Linus Torvalds. 2021. Memory Folios commit. github.com (Nov 2021). https:\/\/github.com\/torvalds\/linux\/commit\/49f8275c7d92'spm=a2c65.11461447.0.0.68003853jfMprB"},{"key":"e_1_3_2_1_34_1","volume-title":"Memory management in Linux 5.15. GitHub (Aug","author":"Torvalds Linus","year":"2021","unstructured":"Linus Torvalds. 2021. Memory management in Linux 5.15. GitHub (Aug 2021). https:\/\/github.com\/torvalds\/linux\/blob\/v5.15\/Documentation\/x86\/x86_64\/mm.rst"},{"key":"e_1_3_2_1_35_1","volume-title":"Usage statistics of operating systems for websites. W3Techs (Sep","year":"2023","unstructured":"W3Techs. 2023. Usage statistics of operating systems for websites. W3Techs (Sep 2023). https:\/\/w3techs.com\/technologies\/overview\/operating_system"},{"key":"e_1_3_2_1_36_1","volume-title":"An analysis of address space layout randomization on Windows Vista. Symantec advanced threat research","author":"Whitehouse Ollie","year":"2007","unstructured":"Ollie Whitehouse. 2007. An analysis of address space layout randomization on Windows Vista. Symantec advanced threat research (2007), 1--14."},{"key":"e_1_3_2_1_37_1","volume-title":"lwn.net (May","author":"Wilcox Matthew","year":"2021","unstructured":"Matthew Wilcox. 2021. Memory Folios. lwn.net (May 2021). https:\/\/lwn.net\/Articles\/856016\/"},{"key":"e_1_3_2_1_38_1","volume-title":"32nd USENIX Security Symposium, USENIX Security 2023","author":"Yu Jiyong","year":"2023","unstructured":"Jiyong Yu, Aishani Dutta, Trent Jaeger, David Kohlbrenner, and Christopher W. Fletcher. 2023. Synchronization Storage Channels (S2C): Timer-less Cache Side-Channel Attacks on the Apple M1 via Hardware Synchronization Instructions. In 32nd USENIX Security Symposium, USENIX Security 2023, Anaheim, CA, USA, August 9--11, 2023, Joseph A. Calandrino and Carmela Troncoso (Eds.). USENIX Association, 1973--1990. https:\/\/www.usenix.org\/conference\/usenixsecurity23\/presentation\/yu-jiyong"},{"key":"e_1_3_2_1_39_1","volume-title":"Scraps of notes on remote stack overflow exploitation. Phrack Magazine (Nov","author":"Zabrocki Adam","year":"2010","unstructured":"Adam 'pi3' Zabrocki. 2010. Scraps of notes on remote stack overflow exploitation. Phrack Magazine (Nov 2010). http:\/\/phrack.org\/issues\/67\/13.html#article"}],"event":{"name":"CCS '24: ACM SIGSAC Conference on Computer and Communications Security","location":"Salt Lake City UT USA","acronym":"CCS '24","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3658644.3690239","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3658644.3690239","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,22]],"date-time":"2025-08-22T06:06:56Z","timestamp":1755842816000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3658644.3690239"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,12,2]]},"references-count":39,"alternative-id":["10.1145\/3658644.3690239","10.1145\/3658644"],"URL":"https:\/\/doi.org\/10.1145\/3658644.3690239","relation":{},"subject":[],"published":{"date-parts":[[2024,12,2]]},"assertion":[{"value":"2024-12-09","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}