The geometry of innocent flesh on the bone: return-into-libc without function calls (on the x86)

No abstract is available for this paper.

• Publication year

  2007

• Venue

  Conference on Computer and Communications Security

• Publication date

  2007-10-28

• Fields of study

  Mathematics, Computer Science

• Identifiers
  DOI 10.1145/1315245.1315313
• External record

  Open on Semantic Scholar

• Source metadata

  Semantic Scholar

• No claims are published for this paper.

• No concepts are published for this paper.

• Evaluating SFI for a CISC Architecture

  2006cited by this paper
• Automating Mimicry Attacks Using Static Binary Analysis

  2005cited by this paper
• Where's the FEEB? The Effectiveness of Instruction Set Randomization

  2005cited by this paper
• Randomized instruction set emulation

  2005cited by this paper
• Experiences Using Minos as a Tool for Capturing and Analyzing Novel Worms for Unknown Vulnerabilities

  2005influential reference
• IA-32 Intel Architecture Software Developers Manual

  2004cited by this paper
• On the effectiveness of address-space randomization

  2004cited by this paper
• Defeating the Stack Based Buffer Overflow Prevention Mechanism of Microsoft Windows 2003 Server

  2003cited by this paper
• Secure Programming for Linux and Unix HOWTO

  2003influential reference
• Smashing the stack for fun and prot

  1996cited by this paper
• Smashing The Stack For Fun And Profit

  1996cited by this paper
• System V Application Binary Interface

  1993cited by this paper

• SSMR: Statically Detecting Speculation Safe Memory Regions to Mitigate Transient Execution Attacks

  2026cites this paper
• Secure and efficient application monitoring and replication without kernel patches

  2026cites this paper
• CVA6-CFI: A First Glance at RISC-V Control-Flow Integrity Extensions

  2026cites this paper
• Systems Security Foundations for Agentic Computing

  2025cites this paper
• HarDTAPE: Hardware Dedicated Trusted transAction Pre-Executor

  2025cites this paper
• Resilient Scheduling of Real-Time Cyber-Physical Systems Against Memory-Corruptions

  2025cites this paper
• Predictable Paths: Novel ASLR Bypass Methods and Mitigations

  2025influential citation
• Large Language Models-Aided Program Debloating

  2025cites this paper
• DopSteg: Program steganography using data-oriented programming

  2025cites this paper
• PRISM: Programmatic Reasoning with Image Sequence Manipulation for LVLM Jailbreaking

  2025influential citation
• Software Vulnerability Detection Tool Using Machine Learning Algorithms

  2025cites this paper
• Control-Flow Integrity for Resource-Constrained Devices

  2025cites this paper
• Protecting Cryptographic Code Against Spectre-RSB: (and, in Fact, All Known Spectre Variants)

  2025cites this paper
• Function-Oriented Programming Attacks on ARM Cortex-M Processors

  2025cites this paper
• Security and Protection in Modern Operating Systems: A Comprehensive Review

  2025cites this paper
• Cybersecurity Architecture: The Case for Teaching Computer Hardware and Computer Security Together

  2025cites this paper
• Await() a Second: Evading Control Flow Integrity by Hijacking C++ Coroutines

  2025cites this paper
• How to Secure Existing C and C++ Software without Memory Safety

  2025cites this paper
• EILID: Execution Integrity for Low-end IoT Devices

  2025cites this paper
• A Segmented Stack Randomization for bare-metal IoT devices

  2025cites this paper
• Too Subtle to Notice: Investigating Executable Stack Issues in Linux Systems

  2025influential citation
• Wemby’s Web: Hunting for Memory Corruption in WebAssembly

  2025cites this paper
• CHARON: Polyglot Code Analysis for Detecting Vulnerabilities in Scripting Languages Native Extensions

  2025cites this paper
• Resolving Indirect Calls in Binary Code via Cross-Reference Augmented Graph Neural Networks

  2025cites this paper
• BinCOP: Automated mining of code reuse paths for binary component oriented programming

  2025cites this paper
• Hacking in DSP: Return-oriented Programming Against CSM

  2025cites this paper
• Quant Fever, Reasoning Blackholes, Schrodinger's Compliance, and More: Probing GPT-OSS-20B

  2025cites this paper
• MVX-based mitigation of position-independent code reuse

  2025cites this paper
• Nothing is Unreachable: Automated Synthesis of Robust Code-Reuse Gadget Chains for Arbitrary Exploitation Primitives

  2025cites this paper
• DynHaMo: Dynamic Hardware-Based Monitoring Dedicated to Attacks Detection

  2025cites this paper
• Mad Monk: Arbitrary Criticality Escalation in Mixed Criticality Real-Time Systems

  2025cites this paper
• More Granular, Less Trust: Enforcing Intra-Process Isolation With Arm CCA in an Untrusted Management Environment

  2025cites this paper
• RunPBA - Runtime attestation for microcontrollers with PACBTI

  2025cites this paper
• EM-Flow: Advanced Electromagnetic Control Flow Verification for Embedded Systems

  2025cites this paper
• NanoZone: Scalable, Efficient, and Secure Memory Protection for Arm CCA

  2025influential citation
• War on JITs: Software-Based Attacks and Hybrid Defenses for JIT Compilers - A Comprehensive Survey

  2025influential citation
• Bridging the Gap between Real-World and Formal Binary Lifting through Filtered-Simulation

  2025cites this paper
• CUDA, Woulda, Shoulda: Returning Exploits in a SASS-y World

  2025cites this paper
• Synthesis of Code-Reuse Attacks from p-code Programs

  2025cites this paper
• Differential Cryptanalysis of the Reduced Pointer Authentication Code Function used in Arm's FEAT_PACQARMA3 Feature

  2025cites this paper
• Tackling ML-based Dynamic Mispredictions using Statically Computed Invariants for Attack Surface Reduction

  2025cites this paper
• Non-Control-Data Attacks and Defenses: A Review

  2025cites this paper
• Efficient Hardware-Assisted Heap Memory Safety for Embedded RISC-V Systems

  2025cites this paper
• Can Safety Fine-Tuning Be More Principled? Lessons Learned from Cybersecurity

  2025cites this paper
• Control Flow Protection by Cryptographic Instruction Chaining

  2025influential citation
• Overview of the Code-Reuse Attacks Mitigations, and Evaluation using SMAA-2 Approach

  2025cites this paper
• Enhancing in-process isolation for robust defense against information disclosure attacks

  2025cites this paper
• PtrProxy: Efficient code re-randomization on AArch64 platform

  2025cites this paper
• Investigating Compact Shadow Stacks for the Xtensa LX Architecture

  2025cites this paper
• Aspycot: A Spike and Python Co-simulation Testbench for Hardware Monitoring IPs

  2025cites this paper
• Highlight & Summarize: RAG without the jailbreaks

  2025cites this paper
• Process Injection Using Return-Oriented Programming

  2025cites this paper
• Cybersecurity of Quantum Key Distribution Implementations

  2025cites this paper
• WindowGuardian: Return Address Integrity for ESP32 Microcontrollers with Xtensa Processors using AES and Register Windows

  2024cites this paper
• CacheSquash: Making caches speculation-aware

  2024cites this paper
• InsectACIDE: Debugger-Based Holistic Asynchronous CFI for Embedded System

  2024cites this paper
• CarePlus: A general framework for hardware performance counter based malware detection under system resource competition

  2024cites this paper
• MiniMon: Minimizing Android Applications with Intelligent Monitoring-based Debloating

  2024cites this paper
• InSpectre Gadget: Inspecting the Residual Attack Surface of Cross-privilege Spectre v2

  2024cites this paper
• Heckler: Breaking Confidential VMs with Malicious Interrupts

  2024cites this paper
• SoK: Understanding Design Choices and Pitfalls of Trusted Execution Environments

  2024cites this paper
• Beyond the Edges of Kernel Control-Flow Hijacking Protection with HEK-CFI

  2024cites this paper
• DEEPTYPE: Refining Indirect Call Targets with Strong Multi-layer Type Analysis

  2024cites this paper
• DROPSYS: Detection of ROP attacks using system information

  2024cites this paper
• Detection, exploitation and mitigation of memory errors

  2024cites this paper
• A hybrid LLM workflow can help identify user privilege related variables in programs of any size

  2024cites this paper
• Binary Code Security: The Source of Vulnerability, Exploitation and Mitigation Techniques

  2024cites this paper
• Combined Static Analysis and Machine Learning Prediction for Application Debloating

  2024cites this paper
• Charlie, Charlie, Charlie on Industrial Control Systems: PLC Control Logic Attacks by Design, Not by Chance

  2024cites this paper
• Mon CHERI: Mitigating Uninitialized Memory Access with Conditional Capabilities

  2024cites this paper
• HasTEE+ : Confidential Cloud Computing and Analytics with Haskell

  2024cites this paper
• DAEDALUS: Defense Against Firmware ROP Exploits Using Stochastic Software Diversity

  2024cites this paper
• Active Defense Research: A New Perspective Integrating Traps and Vulnerabilities

  2024cites this paper
• Architectural Neural Backdoors from First Principles

  2024cites this paper
• Assessing the Effectiveness of Binary-Level CFI Techniques

  2024cites this paper
• I’ll Be There for You! Perpetual Availability in the A8 MVX System

  2024cites this paper
• QUACK: Hindering Deserialization Attacks via Static Duck Typing

  2024cites this paper
• Backward-Edge Control Flow Integrity Based on Return Address Encryption

  2024cites this paper
• Partial Context-Sensitive Pointer Integrity for Real-time Embedded Systems

  2024cites this paper
• Do we still need canaries in the coal mine? Measuring shadow stack effectiveness in countering stack smashing

  2024cites this paper
• UltraVCS: Ultra-Fine-Grained Variable-Based Code Slicing for Automated Vulnerability Detection

  2024cites this paper
• StackSpecter: Detecting Stack Buffer Overflows for the Xtensa Architecture

  2024cites this paper
• Sidecar: Leveraging Debugging Extensions in Commodity Processors to Secure Software

  2024cites this paper
• On the Verification of Control Flow Attestation Evidence

  2024cites this paper
• Toward Profiling IoT Processes for Remote Service Attestation

  2024cites this paper
• Whisper: Timing the Transient Execution to Leak Secrets and Break KASLR

  2024cites this paper
• Retrofitting XoM for Stripped Binaries without Embedded Data Relocation

  2024cites this paper
• SpecCFA: Enhancing Control Flow Attestation/Auditing via Application-Aware Sub-Path Speculation

  2024cites this paper
• Evaluation of Malware Classification Models for Heterogeneous Data

  2024cites this paper
• MAXPOWR: Memory Attestation and Export in Process-based Trusted Execution Environments

  2024cites this paper
• KPDP: Kernel Permission Data Protection Against Data-Oriented Attacks

  2024cites this paper
• TRACES: TEE-based Runtime Auditing for Commodity Embedded Systems

  2024cites this paper
• Eclipse: Preventing Speculative Memory-error Abuse with Artificial Data Dependencies

  2024cites this paper
• VRT: A Runtime Protection Against Back-Edge Control Flow Integrity Violation

  2024cites this paper
• Untrusted Code Compartmentalization for Bare Metal Embedded Devices

  2024cites this paper
• KPAC: Efficient Emulation of the ARM Pointer Authentication Instructions

  2024cites this paper
• Manipulative Interference Attacks

  2024cites this paper
• Basilisk: Remote Code Execution by Laser Excitation of P-N Junctions Without Insider Assistance

  2024cites this paper
• Control-Flow Attestation: Concepts, Solutions, and Open Challenges

  2024cites this paper
• Porting to Morello: An In-depth Study on Compiler Behaviors, CERT Guideline Violations, and Security Implications

  2024cites this paper