Systems and methods for preventing heap-spray attacks

A system for preventing heap-spray attacks, the system comprising:

• an identification module programmed to:
• identify an object-oriented program;
• identify, within the object-oriented program, a request to allocate memory for a polymorphic object, the polymorphic object comprising a pointer to a virtual method table that supports dynamic dispatch for at least one method of the polymorphic object;
• a reservation module programmed to allocate an object heap that is reserved for objects and is separate from a default heap used for non-object data types;
• an allocation module programmed to allocate memory for the polymorphic object from the object heap;
• at least one processor configured to execute the identification module, the reservation module, and the allocation module.

A computer-readable-storage medium comprising one or more computer-executable instructions that, when executed by at least one processor of a computing device, cause the computing device to:

• identify an object-oriented program;
• identify, within the object-oriented program, a request to allocate memory for a polymorphic object, the polymorphic object comprising a pointer to a virtual method table that supports dynamic dispatch for at least one method of the polymorphic object;
• allocate an object heap that is reserved for objects and is separate from a default heap used for non-object data types;
• allocate memory for the polymorphic object from the object heap.