Keyword

return-oriented programming

Description: Return-oriented programming is a computer security exploit technique that chains existing code sequences to redirect program control flow, often without injecting new code.

Primary topic: Security and Verification in Computing (94%)

Wikidata ID: wiki/Q278937

OpenAlex ID: keywords/return-oriented-programming

Spectre Attacks: Exploiting Speculative Execution

2019 · Paul Kocher, Jann Horn, et al. · Proceedings - IEEE Symposium on Security and Privacy/Proceedings of the ... IEEE Symposium on Security and Privacy · 1,845

PDF

Jump-oriented programming

2011 · Tyler Bletsch, Xuxian Jiang, et al. · ACM Symposium on Information, Computer and Communications Security · 554

Return-oriented programming without returns

2010 · Stephen Checkoway, Lucas Davi, et al. · Proceedings of the ACM Conference on Computer and Communications Security · 534

Return-Oriented Programming

2012 · Ryan Roemer, Erik Buchanan, et al. · ACM Transactions on Information and System Security · 499

Control flow integrity for COTS binaries

2013 · Mingwei Zhang, R. Sekar · 407

Out of Control: Overcoming Control-Flow Integrity

2014 · Enes Goktas, Elias Athanasopoulos, et al. · Proceedings - IEEE Symposium on Security and Privacy/Proceedings of the ... IEEE Symposium on Security and Privacy · 365

PDF

When good instructions go bad

2008 · Erik Buchanan, Ryan Roemer, et al. · Proceedings of the ACM Conference on Computer and Communications Security · 362

Counterfeit Object-oriented Programming: On the Difficulty of Preventing Code Reuse Attacks in C++ Applications

2015 · Felix Schuster, Thomas Tendyck, et al. · Proceedings - IEEE Symposium on Security and Privacy/Proceedings of the ... IEEE Symposium on Security and Privacy · 356

PDF

Code-pointer integrity

2014 · Volodymyr Kuznetsov, László Szekeres, et al. · Infoscience (Ecole Polytechnique Fédérale de Lausanne) · 342

PDF

Smashing the Gadgets: Hindering Return-Oriented Programming Using In-place Code Randomization

2012 · Vasilis Pappas, Michalis Polychronakis, et al. · Proceedings - IEEE Symposium on Security and Privacy/Proceedings of the ... IEEE Symposium on Security and Privacy · 326

ROP is still dangerous: breaking modern defenses

2014 · Nicholas Carlini, David Wagner · 287

ROPecker: A Generic and Practical Approach For Defending Against ROP Attacks

2014 · Yueqiang Cheng, Zongwei Zhou, et al. · Network and Distributed System Security Symposium · 286

Spectre attacks

2020 · Paul Kocher, Jann Horn, et al. · Communications of the ACM · 279

Transparent ROP exploit mitigation using indirect branch tracing

2013 · Vasilis Pappas, Michalis Polychronakis, et al. · USENIX Security Symposium · 274

Stitching the gadgets: on the ineffectiveness of coarse-grained control-flow integrity protection

2014 · Lucas Davi, Ahmad‐Reza Sadeghi, et al. · USENIX Security Symposium · 265

Code injection attacks on harvard-architecture devices

2008 · Aurélien Francillon, Claude Castelluccia · Proceedings of the ACM Conference on Computer and Communications Security · 265

PDF

ILR: Where'd My Gadgets Go?

2012 · Jason Hiser, Anh Nguyen-Tuong, et al. · Proceedings - IEEE Symposium on Security and Privacy/Proceedings of the ... IEEE Symposium on Security and Privacy · 260

C-FLAT

2016 · Tigist Abera, N. Asokan, et al. · ACM SIGSAC Conference on Computer and Communications Security (CCS) · 257

ROPdefender

2011 · Lucas Davi, Ahmad-Reza Sadeghi, et al. · ACM Symposium on Information, Computer and Communications Security · 244

The Performance Cost of Shadow Stacks and Stack Canaries

2015 · Thurston H.Y. Dang, Petros Maniatis, et al. · ACM Symposium on Information, Computer and Communications Security · 234

Return-oriented rootkits: bypassing kernel code integrity protection mechanisms

2009 · Ralf Hund, Thorsten Holz, et al. · 217

G-Free

2010 · Kaan Onarlioglu, Leyla Bilge, et al. · Annual Computer Security Applications Conference · 214

Enhanced operating system security through efficient and fine-grained address space randomization

2012 · Cristiano Giuffrida, Anton Kuijsten, et al. · 212

Prefetch Side-Channel Attacks

2016 · Daniel Gruss, Clémentine Maurice, et al. · ACM SIGSAC Conference on Computer and Communications Security (CCS) · 210

On the difficulty of software-based attestation of embedded devices

2009 · Claude Castelluccia, Aurélien Francillon, et al. · Proceedings of the ACM Conference on Computer and Communications Security · 210

Works count: 709

Citation count: 17,080