ASLR
Technology & Computing abbreviation · Cybersecurity
| Stands for | Address space layout randomization |
|---|---|
| Categories | Technology & Computing |
ASLR stands for Address space layout randomization, a cybersecurity abbreviation.
A defense built into operating systems that places a program's code, libraries, stack and heap at random memory addresses each time it runs, so attackers exploiting memory bugs cannot predict where to jump.
Example: The exploit needed an information leak first, because ASLR randomized the library addresses.
Usage notes
The PaX project introduced it for Linux in 2001, and Windows Vista, iOS, Android and macOS later adopted it. Attackers bypass it with memory-disclosure bugs or brute force where randomness is limited. It is combined with non-executable memory (DEP or NX) and stack canaries.
Related abbreviations
More cybersecurity abbreviations
- 2FA – Two-factor authentication
- AAA – Authentication, authorization and accounting
- ABAC – Attribute-based access control
- ACL – Access control list
- AES – Advanced Encryption Standard
- APT – Advanced persistent threat
- ATT&CK – Adversarial Tactics, Techniques, and Common Knowledge
- AV – Antivirus
- BEC – Business email compromise
- BYOD – Bring your own device
- C2 – Command and control
- CA – Certificate authority