Control-Flow Integrity
暂无分享,去创建一个
Mathias Payer | Nathan Burow | Michael Franz | Stefan Brunthaler | Scott A. Carr | Per Larsen | Joseph Nash | Mathias Payer | M. Franz | N. Burow | Per Larsen | Stefan Brunthaler | Joseph Nash
[1] Herbert Bos,et al. Practical Context-Sensitive CFI , 2015, CCS.
[2] Mathias Payer,et al. Control-Flow Integrity , 2017, ACM Comput. Surv..
[3] Dawn Xiaodong Song,et al. SoK: Eternal War in Memory , 2013, 2013 IEEE Symposium on Security and Privacy.
[4] 共立出版株式会社. コンピュータ・サイエンス : ACM computing surveys , 1978 .
[5] Sorin Lerner,et al. Protecting C++ Dynamic Dispatch Through VTable Interleaving , 2016, NDSS.
[6] Xuhua Ding,et al. Hardware-Assisted Fine-Grained Code-Reuse Attack Detection , 2015, RAID.
[7] Ahmad-Reza Sadeghi,et al. MoCFI: A Framework to Mitigate Control-Flow Attacks on Smartphones , 2012, NDSS.
[8] Vikram S. Adve,et al. KCoFI: Complete Control-Flow Integrity for Commodity Operating System Kernels , 2014, 2014 IEEE Symposium on Security and Privacy.
[9] David A. Wagner,et al. Control-Flow Bending: On the Effectiveness of Control-Flow Integrity , 2015, USENIX Security Symposium.
[10] Markus Mock,et al. Dynamic points-to sets: a comparison with static analyses and potential applications in program understanding and optimization , 2001, PASTE '01.
[11] Ben Niu,et al. Monitor integrity protection with space efficiency and separate compilation , 2013, CCS.
[12] Thomas R. Gross,et al. Fine-Grained Control-Flow Integrity Through Binary Hardening , 2015, DIMVA.
[13] Fan Long,et al. Control Jujutsu: On the Weaknesses of Fine-Grained Control Flow Integrity , 2015, CCS.
[14] Herbert Bos,et al. Out of Control: Overcoming Control-Flow Integrity , 2014, 2014 IEEE Symposium on Security and Privacy.
[15] Peter M. Kogge,et al. An Architectural Trail to Threaded-Code Systems , 1982, Computer.
[16] Michael Hind,et al. Pointer analysis: haven't we solved this problem yet? , 2001, PASTE '01.
[17] Flemming Nielson,et al. Principles of Program Analysis , 1999, Springer Berlin Heidelberg.
[18] Ben Niu,et al. Modular control-flow integrity , 2014, PLDI.
[19] Barbara G. Ryder,et al. Parameterized object sensitivity for points-to and side-effect analyses for Java , 2002, ISSTA '02.
[20] Ahmad-Reza Sadeghi,et al. Hardware-assisted fine-grained control-flow integrity: Towards efficient protection of embedded systems against software exploitation , 2014, 2014 51st ACM/EDAC/IEEE Design Automation Conference (DAC).
[21] Thorsten Holz,et al. Control-flow restrictor: compiler-based CFI for iOS , 2013, ACSAC.
[22] Milo M. K. Martin,et al. CETS: compiler enforced temporal safety for C , 2010, ISMM '10.
[23] Milo M. K. Martin,et al. SoftBound: highly compatible and complete spatial memory safety for c , 2009, PLDI '09.
[24] Hovav Shacham,et al. Return-oriented programming without returns , 2010, CCS '10.
[25] Ben Niu,et al. Per-Input Control-Flow Integrity , 2015, CCS.
[26] Angelos D. Keromytis,et al. Transparent ROP Exploit Mitigation Using Indirect Branch Tracing , 2013, USENIX Security Symposium.
[27] David A. Wagner,et al. The Performance Cost of Shadow Stacks and Stack Canaries , 2015, AsiaCCS.
[28] Jens Palsberg,et al. Scalable propagation-based call graph construction algorithms , 2000, OOPSLA '00.
[29] David Grove,et al. A framework for call graph construction algorithms , 2001, TOPL.
[30] Michael Hind,et al. Which pointer analysis should I use? , 2000, ISSTA '00.
[31] Trent Jaeger,et al. Fine-Grained Control-Flow Integrity for Kernel Software , 2016, 2016 IEEE European Symposium on Security and Privacy (EuroS&P).
[32] Urs Hölzle,et al. Optimizing dynamically-dispatched calls with run-time type feedback , 1994, PLDI '94.
[33] Ben Hardekopf,et al. Flow-sensitive pointer analysis for millions of lines of code , 2011, International Symposium on Code Generation and Optimization (CGO 2011).
[34] James R. Bell,et al. Threaded code , 1973, CACM.
[35] Ben Niu,et al. RockJIT: Securing Just-In-Time Compilation Using Modular Control-Flow Integrity , 2014, CCS.
[36] Xuxian Jiang,et al. Mitigating code-reuse attacks with control-flow locking , 2011, ACSAC '11.
[37] Robert H. Deng,et al. ROPecker: A Generic and Practical Approach For Defending Against ROP Attacks , 2014, NDSS.
[38] Ahmad-Reza Sadeghi,et al. HAFIX: Hardware-Assisted Flow Integrity eXtension , 2015, 2015 52nd ACM/EDAC/IEEE Design Automation Conference (DAC).
[39] Sorin Lerner,et al. SafeDispatch: Securing C++ Virtual Calls from Memory Corruption Attacks , 2014, NDSS.
[40] Mingwei Zhang,et al. Control Flow Integrity for COTS Binaries , 2013, USENIX Security Symposium.
[41] Úlfar Erlingsson,et al. Enforcing Forward-Edge Control-Flow Integrity in GCC & LLVM , 2014, USENIX Security Symposium.
[42] Per Larsen,et al. Strategy without tactics: Policy-agnostic hardware-enhanced control-flow integrity , 2016, 2016 53nd ACM/EDAC/IEEE Design Automation Conference (DAC).
[43] David A. Wagner,et al. ROP is Still Dangerous: Breaking Modern Defenses , 2014, USENIX Security Symposium.
[44] Ben Hardekopf,et al. The ant and the grasshopper: fast and accurate pointer analysis for millions of lines of code , 2007, PLDI '07.
[45] Ahmad-Reza Sadeghi,et al. Stitching the Gadgets: On the Ineffectiveness of Coarse-Grained Control-Flow Integrity Protection , 2014, USENIX Security Symposium.
[46] Atanas Rountev,et al. Evaluating the imprecision of static analysis , 2004, PASTE '04.
[47] Zhi Wang,et al. HyperSafe: A Lightweight Approach to Provide Lifetime Hypervisor Control-Flow Integrity , 2010, 2010 IEEE Symposium on Security and Privacy.
[48] Dan Boneh,et al. CCFI: Cryptographically Enforced Control Flow Integrity , 2015, CCS.
[49] Thorsten Holz,et al. Towards automated integrity protection of C++ virtual function tables in binary programs , 2014, ACSAC.
[50] Derek Bruening,et al. Secure Execution via Program Shepherding , 2002, USENIX Security Symposium.
[51] Heng Yin,et al. vfGuard: Strict Protection for Virtual Function Calls in COTS C++ Binaries , 2015, NDSS.
[52] Andrew C. Myers,et al. Language-based information-flow security , 2003, IEEE J. Sel. Areas Commun..
[53] Alexander Aiken,et al. How is aliasing used in systems software? , 2006, SIGSOFT '06/FSE-14.
[54] John Aycock,et al. A brief history of just-in-time , 2003, CSUR.
[55] Sotiris Ioannidis,et al. HCFI: Hardware-enforced Control-Flow Integrity , 2016, CODASPY.
[56] Ondrej Lhoták,et al. Context-Sensitive Points-to Analysis: Is It Worth It? , 2006, CC.
[57] Vladimir L. Kiriansky. Secure execution environment via program shepherding , 2003 .
[58] David F. Bacon,et al. Fast static analysis of C++ virtual function calls , 1996, OOPSLA '96.
[59] Hovav Shacham,et al. The geometry of innocent flesh on the bone: return-into-libc without function calls (on the x86) , 2007, CCS '07.
[60] Per Larsen,et al. Opaque Control-Flow Integrity , 2015, NDSS.
[61] Yutao Liu,et al. CFIMon: Detecting violation of control flow integrity using performance counters , 2012, IEEE/IFIP International Conference on Dependable Systems and Networks (DSN 2012).
[62] Mihai Budiu,et al. Control-flow integrity principles, implementations, and applications , 2009, TSEC.
[63] Per Larsen,et al. Losing Control: On the Effectiveness of Control-Flow Integrity under Stack Attacks , 2015, CCS.
[64] David Grove,et al. Optimization of Object-Oriented Programs Using Static Class Hierarchy Analysis , 1995, ECOOP.
[65] Per Larsen,et al. SoK: Automated Software Diversity , 2014, 2014 IEEE Symposium on Security and Privacy.
[66] Ahmad-Reza Sadeghi,et al. Counterfeit Object-oriented Programming: On the Difficulty of Preventing Code Reuse Attacks in C++ Applications , 2015, 2015 IEEE Symposium on Security and Privacy.
[67] No License,et al. Intel ® 64 and IA-32 Architectures Software Developer ’ s Manual Volume 3 A : System Programming Guide , Part 1 , 2006 .
[68] Hovav Shacham,et al. Return-Oriented Programming: Systems, Languages, and Applications , 2012, TSEC.
[69] Yannis Smaragdakis,et al. Pointer Analysis , 2015, Found. Trends Program. Lang..
[70] Chao Zhang,et al. VTint: Protecting Virtual Function Tables' Integrity , 2015, NDSS.
[71] Chao Zhang,et al. Practical Control Flow Integrity and Randomization for Binary Executables , 2013, 2013 IEEE Symposium on Security and Privacy.
[72] Bill McCarty,et al. Selinux: NSA's Open Source Security Enhanced Linux , 2004 .
[73] SmaragdakisYannis,et al. Pick your contexts well , 2011 .
[74] Stelios Sidiroglou,et al. Missing the Point(er): On the Effectiveness of Code Pointer Integrity , 2015, 2015 IEEE Symposium on Security and Privacy.
[75] 张凌菱,et al. THE ANT AND THE GRASSHOPPER , 2014 .
[76] André Seznec,et al. Branch prediction and the performance of interpreters — Don't trust folklore , 2015, 2015 IEEE/ACM International Symposium on Code Generation and Optimization (CGO).
[77] Martín Abadi,et al. A Theory of Secure Control Flow , 2005, ICFEM.
[78] Jan M. Van Campenhout,et al. Interpretation and instruction path coprocessing , 1990, Computer systems.
[79] Martín Abadi,et al. Control-flow integrity , 2005, CCS '05.