Gang Shi

Function-Oriented Programming: A New Class of Code Reuse Attack in C Applications

2018

Control-hijacking attacks include code injection attacks and code reuse attacks. In recent years, with the emergence of the defense mechanism data-execution prevention(DEP), code reuse attacks have become mainstream, such as return-oriented programming(ROP), Jump-Oriented Programming(JOP), and …

Zipper Stack: Shadow Stacks Without Shadow

2019 · arXiv (Cornell University)

Return-Oriented Programming (ROP) is a typical attack technique that exploits return addresses to abuse existing code repeatedly. Most of the current return address protecting mechanisms (also known as the Backward-Edge Control-Flow Integrity) work only in …

Flush+Revisit: A Cross-CCX Side-Channel Attack on AMD Processors

2023

Cross-core cache side-channel attacks allow attackers to launch more threatening cross-virtual machine (cross-VM) attacks in the virtualized environment. Most of these cross-core cache side-channel attacks take advantage of the feature that the last-level cache (LLC) …