This extra step hides randomized virtual addresses from microarchitecture structures, preventing side channels from leaking ASLR secrets. Oreo is transparent to user programs and incurs low overhead.

"ASLR was deployed in operating systems like Windows and Linux, but within the last decade, its security flaws have rendered it almost broken," says Yan. "Our goal is to revive this mechanism in ...