JIT Spraying: Exploits to beat DEP and ASLR Jürgen Schmidt The dream team of data execution prevention (DEP) and address space layout randomisation (ASLR) was long considered an almost insurmountable barrier for attackers. Then along came JIT spraying to move the goalposts and get attackers back in the game. For a while, the combination of security mechanisms introduced in Windows Vista and XP SP2