This paper describes how the StJude kernel module stops local and remote exploits from being successful. The Saint Jude model for improper privilege transitions terminates program execution when it is exploited even if the exploit is unknown.
32a264782ffbeb3b1d5ac2fe7295419e164d7bcced7404713c2fa709c85c1ee7