1 |
Intel 64 and IA-32 architectures software developer's manual, December, 2017.
|
2 |
Nicolas Carlini, Antonio Barresi, Mathias Payer, David Wagner and T. R. Gross, "Control-Flow Bending: On the Effectiveness of Control-Flow Integrity," in Proc. of 24th USENIX Security Symposium, pp. 161-176, August 12-14, 2015.
|
3 |
Isaac Evans, Fan Long, Ulziibayar Otgonbaatar, Howard Shrobe, Martin Rinard, Hamed Okhravi and Stelios Sidiroglou-Douskos, "Control jujutsu: On the weaknesses of fine-grained control flow integrity," in Proc. of 22nd ACM SIGSAC Conference on Computer and Communications Security, pp. 901-913, October 12-16, 2015.
|
4 |
Arati Baliga, Vinod Ganapathy and Liviu Iftode, "Detecting kernel-level rootkits using data structure invariants," IEEE Transactions on Dependable and Secure Computing, vol. 8, no. 5, pp. 670-684, September/October, 2011.
DOI
|
5 |
Hong Hu, Z. L. Chua, Sendroiu Adrian, Prateek Saxena and Zhenkai Liang, "Automatic Generation of Data-Oriented Exploits," in Proc. of 24th USENIX Security Symposium, pp. 177-192, August 12-14, 2015.
|
6 |
Hong Hu, Shweta Shinde, Sendroiu Adrian, Z. L. Chua, Prateek Saxena and Zhenkai Liang, "Data oriented programming: On the expressiveness of non-control data attacks," in Proc. of 2016 IEEE Symposium on Security and Privacy, pp. 969-986, May 22-26, 2016.
|
7 |
G. C. Necula, Jeremy Condit, Matthew Harren, Scott McPeak and Westley Weimer, "CCured: type-safe retrofitting of legacy software," ACM Transactions on Programming Languages and Systems (TOPLAS), vol. 27, no.3, pp. 477-526, March, 2005.
DOI
|
8 |
Trevor Jim, Greg Morrisett, Dan Grossman, Michael Hicks, James Cheney and Yanling Wang, "Cyclone: A Safe Dialect of C," in Proc. of 2002 USENIX Annual Technical Conference, pp. 275-288, June 10-15, 2002.
|
9 |
Santosh Nagarakatte, Jianzhou Zhao, M. Martin and Steve Zdancewic, "SoftBound: highly compatible and complete spatial memory safety for C," ACM Sigplan Notices, vol. 44, no. 6, pp. 245-258, June, 2009.
DOI
|
10 |
Santosh Nagarakatte, Jianzhou Zhao, M. Martin and Steve Zdancewic, "CETS: compiler enforced temporal safety for C," ACM Sigplan Notices, vol. 45, no. 8, pp. 31-40, August, 2010.
DOI
|
11 |
S. A. Carr and Mathias Payer, "DataShield: Configurable Data Confidentiality and Integrity," in Proc. of the 2017 ACM on Asia Conference on Computer and Communications Security, pp. 193-204, April 2-6, 2017.
|
12 |
Ulfar Erlingsson, Martin Abadi, Michael Vrable, Mihar Budiu and G. C. Necula, "XFI: Software guards for system address spaces," in Proc. of 7th Symposium on Operating Systems Design and Implementation, pp. 75-88, November 6-8, 2006.
|
13 |
David Sehr, Robert Muth, Cliff Biffle, Victor Khimenko, Egor Pasko, Karl Schimpf, Bennet Yee and Brad Chen, "Adapting Software Fault Isolation to Contemporary CPU Architectures," in Proc. of 19th USENIX Security Symposium, pp. 1-12, August 11-13, 2010.
|
14 |
Volodymyr Kuznetsov, Laszlo Szekeres, Mathias Payer, George Candea, R. Sekar and Dawn Song, "Code-Pointer Integrity," in Proc. of 11th Symposium on Operating Systems Design and Implementation, pp. 147-163, October 6-8, 2014.
|
15 |
Yajin Zhou, Xiaoguang Wang, Yue Chen and Zhi Wang, "Armlock: Hardware-based fault isolation for arm," in Proc. of 21st ACM SIGSAC Conference on Computer and Communications Security, pp. 558-569, November 3-7, 2014.
|
16 |
Chengyu Song, Hyungon Moon, Monjur Alam, Insu Yun, Byoungyoung Lee, Taesoo Kim, Wenke Lee and Yunheung Paek, "HDFI: hardware-assisted data-flow isolation," in Proc. of 2016 IEEE Symposium on Security and Privacy, pp. 1-17, May 22-26, 2016.
|
17 |
Shuo Chen, Jun Xu, Nithin Nakka, Zbigniew Kalbarczyk and R. K. Iyer, "Defeating memory corruption attacks via pointer taintedness detection," in Proc. of 2005 International Conference on Dependable Systems and Networks, pp. 378-387, June 28-July 1, 2005.
|
18 |
Isaac Evans, Sam Fingeret, Julian Gonzalez, Ulziibayar Otgonbaatar, Tiffany Tang, Howard Shrobe, Stelios Sidiroglou-Douskos, Martin Rinard and Hamed Okhravi, "Missing the point(er): On the effectiveness of code pointer integrity," in Proc. of 2015 IEEE Symposium on Security and Privacy, pp. 781-796, May 17-21, 2015.
|
19 |
Mauro Conti, Stephen Cranez, Lucas Daviy, Michael Franzz, Per Larsenz, Christopher Liebcheny, Marco Negroy, Mohaned Qunaibitz and Ahmad-Reza Sadeghiy, "Losing control: On the effectiveness of control-flow integrity under stack attacks," in Proc. of 22nd ACM SIGSAC Conference on Computer and Communications Security, pp. 952-963, October 12-16, 2015.
|
20 |
G. E. Suh, J. W. Lee, David Zhang and Srinivas Devadas, "Secure program execution via dynamic information flow tracking," Acm Sigplan Notices, vol. 39, no. 11, pp. 85-96, November, 2004.
DOI
|
21 |
Jingfei Kong, C. C. Zou and Huiyang Zhou, "Improving software security via runtime instruction-level taint checking," in Proc. of 1st ACM workshop on Architectural and System Support for Improving Software Dependability, pp. 18-24, October 21, 2006.
|
22 |
Sandeep Bhatkar and R. Sekar, "Data Space Randomization," in Proc. of 5th International Conference on Detection of Intrusions and Malware, and Vulnerability Assessment, pp. 1-22, July 10-11, 2008.
|
23 |
Raoul Strackx, Yves Younan, Pieter Philippaerts, Frank Piessens, Sven Lachmund and Thomas Walter, "Breaking the memory secrecy assumption," in Proc. of 2nd European Workshop on System Security, pp. 1-8, March 31, 2009.
|
24 |
Null HTTPd Remote Heap Overflow Vulnerability.
|
25 |
Jonathan-Christofer Demay, Eric Totel and Frederic Tronel, "SIDAN: A tool dedicated to software instrumentation for detecting attacks on non-control-data," in Proc. of 4th International Conference on Risks and Security of Internet and Systems, pp. 51-58, October 19-22, 2009.
|
26 |
Gildo Torres and Chen Liu, "Can Data-Only Exploits be Detected at Runtime Using Hardware Events?: A Case Study of the Heartbleed Vulnerability," in Proc. of the Hardware and Architectural Support for Security and Privacy, June 18, 2016.
|
27 |
Ben Niu and Gang Tan, "Modular control-flow integrity," ACM SIGPLAN Notices, vol. 49, no. 6, pp. 577-587, June, 2014.
DOI
|
28 |
Chris Lattner and Vikram Adve, "LLVM: A Compilation Framework for Lifelong Program Analysis & Transformation," in Proc. of 2nd IEEE/ACM international symposium on Code generation and optimization, pp. 75-88, March 20-24, 2004.
|
29 |
webbench-1.5.
|
30 |
SSH CRC-32 Compensation Attack Detector Vulnerability.
|
31 |
Crispan Cowan, Calton Pu, Dave Maier, Jonathan Walpole, Peat Bakke, Steve Beattie, Aaron Grier, Perry Wagle and Qian Zhang, "StackGuard: Automatic adaptive detection and prevention of buffer-overflow attacks," in Proc. of 7th USENIX Security Symposium, January 26-29, 1998.
|
32 |
Ted Eisenberg, IDavid Gries, Juris Hartmanis, Don Holcomb, M. S. Lynn and Thomas Santoro, "The Cornell commission: on Morris and the worm," Communications of the ACM, vol. 32, no. 6, pp. 706-709, June, 1989.
DOI
|
33 |
Aleph One, "Smashing the stack for fun and profit," Phrack Magazine, vol. 7, no. 49, November 8, 1996.
|
34 |
Shuo Chen, Jun Xu, E. C. Sezer, Prachi Gauriar and R. K. Iyer, "Non-Control-Data Attacks Are Realistic Threats," in Proc. of 14th USENIX Security Symposium, pp. 177-191, July 31-August 5, 2005.
|
35 |
PaX-Team. PaX ASLR. 2003.
|
36 |
Miguel Castro, Manuel Costa and Tim Harris, "Securing software by enforcing data-flow integrity," in Proc. of 7th Symposium on Operating Systems Design and Implementation, pp. 147-160, November 6-8, 2006.
|
37 |
Starr Andersen and Vincent Abella, "Changes to Functionality in Microsoft Windows XP Service Pack 2, Part 3: Memory protection technologies, Data Execution Prevention," Microsoft TechNet Library, September, 2004.
|
38 |
Martin Abadi, Mihai Budiu, Ulfar Erlingsson and Jay Ligatti, "Control-flow integrity," in Proc. of 12th ACM conference on Computer and Communications Security, vol. 13, pp. 340-353, November 7-11, 2005.
|