This paper provides a systematic exploration of Control Flow Integrity (CFI) and Control Flow
Attestation (CFA) mechanisms, examining their differences and relationships. It addresses …

Memory Protection Keys for Userspace (PKU) is a recent hardware feature that allows
programs to assign virtual memory pages to protection domains, and to change domain …

Control-flow hijacking attacks are still a major challenge in software security. Several means
of protection and detection have been proposed but gaps still exist. To bridge such gaps …

This paper provides a systematic exploration of Control Flow Integrity (CFI) and Control Flow
Attestation (CFA) mechanisms, examining their differences and relationships. It addresses …

Abstract System software written in unsafe languages such as C/C++ is susceptible to
various types of security vulnerabilities. Historically, backward-edges such as return …

System calls are a critical building block in many serious security attacks, such as control-
flow hijacking and privilege escalation attacks. Security-sensitive system calls (eg, execve …

Control-flow integrity (CFI) is a strong and efficient defense mechanism against memory-
corruption attacks. The practical versions of CFI, which have been integrated into compilers …

Inter-process isolation has been deployed in operating systems for decades, but secure intra-
process isolation remains an active research topic. Achieving secure intra-process isolation …

WebAssembly (Wasm), a technology enabling efficient native code execution in web
browsers, has seen a significant rise in adoption as a popular compilation target. This has …

Control-flow hijacking and data-oriented attacks are becoming more sophisticated. These
attacks, especially data-oriented attacks, can result in critical security threats, such as …