Re:Chaff Bugs: Deterring Attackers by Making Software Buggier
by moyix on Sunday August 05, 2018 @01:14PM
(#17692299)
Yep, there are plenty of applications where crashing is a big deal! But, we think, also plenty where that's not an issue. Note also that the "unused" strategy creates bugs that don't cause crashes (but they could be detected with something like ASAN).
So if you running a multi-tenant service, where one of the tenants could be a potential adversary, having a crash-bug is enough for a serious denial of service attack.