Research and Implementation of ISR-New Approach Countering Code-Injection

ISR (Instruction Set Randomization) is a new, general approach for safeguarding systems against any type of code-injection attack. Potentially vulnerable software can be executed on the system that has process-specific randomized instruction sets. An attacker who does not know the key to the randomization algorithm will inject code that is invalid for that randomized processor, causing a runtime exception. ISR can serve as a low-overhead protection mechanism, and can easily complement other mechanisms.