2013 IEEE Symposium on Security and Privacy Practical Control Flow Integrity & Randomization for Binary Executables Chao Zhang1 , Tao Wei1,2∗ , Zhaofeng Chen1 , Lei Duan1 , L´aszl´o Szekeres2,3+ , Stephen McCamant2,

Source URL: seclab.cs.sunysb.edu

ASLR: How Robust is the Randomness? Jonathan Ganz What is Address Space Layout Randomization? ● Provides System-Level Control-Flow Integrity

Source URL: s3.amazonaws.com

CCFI: Cryptographically Enforced Control Flow Integrity Ali José Mashtizadeh Andrea Bittau Dan Boneh

Source URL: iot.stanford.edu

Code-Pointer Integrity Volodymyr Kuznetsov, László Szekeres, Mathias Payer, George Candea, R. Sekar, Dawn Song Control-Flow Hijack Attack Memory

Source URL: dslab.epfl.ch

A Control-Flow Integrity: Precision, Security, and Performance Nathan Burow, Purdue University Scott A. Carr, Purdue University

Source URL: nebelwelt.net

Fine-Grained Control-Flow Integrity through Binary Hardening Mathias Payer1 , Antonio Barresi2 , and Thomas R. Gross2 1 Purdue University

Source URL: nebelwelt.net

Control-Flow Bending: On the Effectiveness of Control-Flow Integrity Nicolas Carlini UC Berkeley Antonio Barresi

Source URL: nebelwelt.net

Taming Transactions: Towards Hardware-Assisted Control Flow Integrity using Transactional Memory Marius Muench1 , Fabio Pagani1 , Yan Shoshitaishvili2 , Christopher Kruegel2 , Giovanni Vigna2 , and Davide Balzarotti1 1 2

Source URL: www.s3.eurecom.fr

Control-Flow Integrity: Precision, Security, and Performance Nathan Burow∗ , Scott Carr∗ , Stefan Brunthaler† , Mathias Payer∗ , Joseph Nash† , Per Larsen† , Michael Franz† arXiv:1602.04056v1 [cs.CR] 12 Feb

Source URL: arxiv.org

2015 IEEE Trustcom/BigDataSE/ISPA Loop-Oriented Programming: A New Code Reuse Attack to Bypass Modern Defenses Bingchen Lan, Yan Li, Hao Sun, Chao Su, Yao Liu, Qingkai Zeng

Source URL: www.sec.in.tum.de

• Software engineering
• Computer programming
• Computing
• Subroutines
• Computer security
• Software bugs
• Memory management
• Return-oriented programming
• Control-flow integrity
• Control flow
• Call stack
• Gadget