System and method for binary layout randomization

A system for executing a binary application, the system comprising:

• a processor;
• a memory;
• a first module configured to control the processor to retrieve the binary application and store the binary application in a first location in the memory;
• a layout randomizing loader configured to control the processor to remap a page of the binary application in the memory to a second location in the memory;
• a patcher module configured to control the processor to identify, in the binary application, relative addresses to the page and patch the relative addresses to point to the second location in the memory;
• and
• a second module configured to control the processor to execute the binary application in the memory.

A non-transitory computer-readable storage medium storing instructions for a computing device to randomize a layout of a binary, the instructions comprising:

• identifying that the binary has been loaded into memory to yield a loaded binary;
• extracting a portion from the loaded binary;
• inserting the portion at a randomly selected location in virtual memory;
• processing a remaining portion of the loaded binary to identify relative addresses to the portion;
• and
• patching the relative addresses to point to the randomly selected location to yield a patched binary.

A compiler for obfuscating binary code, the compiler comprising:

• a processor;
• a first module configured to control the processor to receive the binary code;
• a second module configured to control the processor to identify relative addresses in the binary code;
• a third module configured to control the processor to divide the binary code into sections;
• a fourth module configured to control the processor to generate a mapping table of the relative addresses by section;
• and
• a fifth module configured to control the processor to insert a layout randomizing loader in the binary code that, upon execution of the binary code in memory, identifies a section of the binary code, remaps the section to a different location in the memory, and patches at least one relative address in the binary code based on the different location and the mapping table.