This paper presents DAEDALUS, a software diversity-based framework designed to resist ROP attacks on Linux-based IoT devices. DAEDALUS generates unique, semantically equivalent but syntactically different rewrites of IoT firmware, disrupting large-scale replication of ROP attacks. DAEDALUS employs STOKE, a stochastic optimizer for x86 binaries, as its core diversity engine but introduces significant extensions to address unique IoT firmware challenges. DAEDALUS's effectiveness is evaluated using DDoSim, a published botnet DDoS attack simulation testbed. Results demonstrate that DAEDALUS successfully neutralizes ROP payloads by diversifying critical basic blocks in the firmware, preventing attackers from compromising multiple devices for DDoS attacks via memory error vulnerabilities. The findings indicate that DAEDALUS not only mitigates the impact of ROP attacks on individual IoT devices through probabilistic protection but also thwarts large-scale ROP attacks across multiple devices.

翻译：本文提出DAEDALUS，一种基于软件多样性的防御框架，旨在抵御针对Linux物联网设备的ROP攻击。DAEDALUS能够生成物联网固件的唯一、语义等价但语法不同的重写版本，从而破坏ROP攻击的大规模复制。该框架以x86二进制随机优化器STOKE为核心多样性引擎，并针对物联网固件的特殊挑战进行了重要扩展。通过使用已发布的僵尸网络DDoS攻击仿真测试平台DDoSim，对DAEDALUS的有效性进行了评估。结果表明，DAEDALUS通过多样化固件中的关键基本块成功中和了ROP载荷，阻止攻击者利用内存错误漏洞入侵多台设备发起DDoS攻击。研究结论指出，DAEDALUS不仅能通过概率性保护减轻ROP攻击对单个物联网设备的影响，还能有效挫败跨设备的ROP大规模攻击。