thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Application & OT Security · Intermediate

Address Space Layout Randomization (ASLR)

An OS exploit mitigation that randomizes where code, stack, heap and libraries are loaded in memory.

Definition

ASLR makes it hard for attackers to predict addresses needed for exploits. It is weakened by information leaks and by modules compiled without position-independent code. It works alongside DEP/NX and stack canaries.

Example

Compiling a binary as a position-independent executable so ASLR randomizes its base address.

Exam tip

ASLR is defeated by memory disclosure; it is a mitigation, not a fix.

Related terms