computer security technique involved in protection from buffer overflow attacks, which involves randomly arranging the positions of key data areas of a program in a process's address space