We show that on both the x86 and ARM architectures it is possible to mount return-oriented
programming attacks without using return instructions. Our attacks instead make use of …

We introduce return-oriented programming, a technique by which an attacker can induce
arbitrary behavior in a program whose control flow he has diverted, without injecting any …

Prior work has shown that return oriented programming (ROP) can be used to bypass W⊕
X, a software defense that stops shellcode, by reusing instructions from large libraries such …

Through randomization of the memory space and the confinement of code to non-data
pages, computer security researchers have made a wide range of attacks against program …

Code reuse attacks (CRAs) are recent security exploits that allow attackers to execute
arbitrary code on a compromised machine. CRAs, exemplified by return-oriented and jump …

Nearly all modern software suffers from bloat that negatively impacts its performance and
security. To combat this problem, several automated techniques have been proposed to …

Code Reuse Attacks (CRAs) recently emerged as a new class of security exploits. CRAs
construct malicious programs out of small fragments (gadgets) of existing code, thus …

Through randomization of the memory space and the confinement of code to non-data
pages, computer security researchers have made a wide range of attacks against program …

We demonstrate that automated, architecture-independent gadget search is possible.
Gadgets are code fragments which can be used to build unintended programs from existing …

Code reuse attacks (CRAs) are recent security exploits that allow attackers to execute
arbitrary code on a compromised machine. CRAs, exemplified by return-oriented and jump …