The KPLT: The Kernel as a shared object

Vulnerability amplification is an ever increasing problem in homogeneous large scale networks that operate many instances of the same operating system. Diversification of a process image through techniques such as Address Space Layout Randomization (ASLR) is a commonly used defense against vulnerability amplification. One approach to diversification of a process image is load-time diversity. This paper presents a Kernel Procedure Linkage Table (KPLT) that allows for a unique diversified kernel layout on a per process basis.