{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,23]],"date-time":"2026-09-23T05:46:23Z","timestamp":1790142383548,"version":"4.0.1"},"publisher-location":"Cham","reference-count":34,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783319308050","type":"print"},{"value":"9783319308067","type":"electronic"}],"license":[{"start":{"date-parts":[[2016,1,1]],"date-time":"2016-01-01T00:00:00Z","timestamp":1451606400000},"content-version":"unspecified","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2016]]},"DOI":"10.1007\/978-3-319-30806-7_10","type":"book-chapter","created":{"date-parts":[[2016,3,28]],"date-time":"2016-03-28T07:24:01Z","timestamp":1459149841000},"page":"155-172","source":"Crossref","is-referenced-by-count":14,"title":["Analyzing the Gadgets"],"prefix":"10.1007","author":[{"given":"Andreas","family":"Follner","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Alexandre","family":"Bartel","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Eric","family":"Bodden","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","reference":[{"key":"10_CR1","unstructured":"Intel 64, ia-32 architectures software developer\u2019s manual combined volumes,: 1, 2a, 2b, 2c, 3a, 3b, and 3c, June 2015"},{"key":"10_CR2","doi-asserted-by":"crossref","unstructured":"Abadi, M., Budiu, M., Erlingsson, \u00da., Ligatti, J.: Control-flow integrity. In: ACM Conference on Computer and Communication Security (CCS), Alexandria, VA, pp. 340\u2013353, November 2005","DOI":"10.1145\/1102120.1102165"},{"issue":"2","key":"10_CR3","doi-asserted-by":"publisher","first-page":"97","DOI":"10.1145\/857076.857077","volume":"35","author":"J Aycock","year":"2003","unstructured":"Aycock, J.: A brief history of just-in-time. ACM Comput. Surv. (CSUR) 35(2), 97\u2013113 (2003)","journal-title":"ACM Comput. Surv. (CSUR)"},{"key":"10_CR4","unstructured":"Batchelder, D., Blackbird, J., Felstead, D., Henry, P., Jones, J., Kulkarni, A., Lambert, J., Lauricella, M., Malcolmson, K., Miller, M., Ng, N., Pecelj, D., Rains, T., Sekhar, V., Stewart, H., Thompson, T., Weston, D., Zink, T.: Microsoft Security Intelligence Report, vol. 16 (2013)"},{"key":"10_CR5","doi-asserted-by":"crossref","unstructured":"Bletsch, T., Jiang, X., Freeh, V.W., Liang, Z.: Jump-oriented programming: a new class of code-reuse attack. In: Proceedings of the 6th ACM Symposium on Information, Computer and Communications Security, ASIACCS 2011, pp. 30\u201340. ACM, New York (2011)","DOI":"10.1145\/1966913.1966919"},{"key":"10_CR6","unstructured":"Carlini, N., Barresi, A., Payer, M., Wagner, D., Gross, T.R.: Control-flow bending: On the effectiveness of control-flow integrity. In: 24th USENIX Security Symposium (USENIX Security 15), pp. 161\u2013176. USENIX Association, Washington, D.C., August 2015"},{"key":"10_CR7","unstructured":"Carlini, N., Wagner, D.: ROP is still dangerous: Breaking modern defenses. In: 23rd USENIX Security Symposium (USENIX Security 14), pp. 385\u2013399. USENIX Association, San Diego, August 2014"},{"key":"10_CR8","doi-asserted-by":"crossref","unstructured":"Checkoway, S., Davi, L., Dmitrienko, A., Sadeghi, A.-R., Shacham, H., Winandy, M.: Return-oriented programming without returns. In: CCS 2010, pp. 559\u2013572. ACM (2010)","DOI":"10.1145\/1866307.1866370"},{"key":"10_CR9","doi-asserted-by":"crossref","unstructured":"Cheng, Y., Zhou, Z., Yu, M., Ding, X., Deng, R.H., ROPecker: A generic and practical approach for defending against ROP attacks (2014)","DOI":"10.14722\/ndss.2014.23156"},{"key":"10_CR10","doi-asserted-by":"crossref","unstructured":"Conti, M., Crane, S., Davi, L., Franz, M., Larsen, P., Negro, M., Liebchen, C., Qunaibit, M., Sadeghi, A.-R.: Losing control: On the effectiveness of control-flow integrity under stack attacks. In: Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security, CCS 2015, pp. 952\u2013963. ACM, New York (2015)","DOI":"10.1145\/2810103.2813671"},{"key":"10_CR11","unstructured":"Davi, L., Sadeghi, A.-R., Lehmann, D., Monrose, F.: Stitching the gadgets: On the ineffectiveness of coarse-grained control-flow integrity protection. In: Proceedings of the 23rd USENIX Conference on Security, SEC 2014, pp. 401\u2013416. USENIX Association, Berkeley (2014)"},{"key":"10_CR12","unstructured":"Ducklin, P.: Anatomy of an exploit - inside the CVE-2013-3893 internet explorer zero-day-part 2, October 2013"},{"key":"10_CR13","unstructured":"G\u00f6kta\u015f, E., Athanasopoulos, E., Polychronakis, M., Bos, H., Portokalidis, G.: Size does matter: Why using gadget-chain length to prevent code-reuse attacks is hard. In: Proceedings of the 23rd USENIX Conference on Security Symposium, SEC 2014, pp. 417\u2013432. USENIX Association, Berkeley (2014)"},{"key":"10_CR14","doi-asserted-by":"crossref","unstructured":"G\u00f6ktas, E., Athanasopoulos, E., Bos, H., Portokalidis, G.: Out of control: Overcoming control-flow integrity. In: Proceedings of the IEEE Symposium on Security and Privacy, SP 2014, pp. 575\u2013589. IEEE Computer Society, Washington, DC (2014)","DOI":"10.1109\/SP.2014.43"},{"key":"10_CR15","unstructured":"Homescu, A., Stewart, M., Larsen, P., Brunthaler, S., Franz, M.: Microgadgets: Size does matter in turing-complete return-oriented programming. In: Presented as part of the 6th USENIX Workshop on Offensive Technologies. USENIX, Berkeley (2012)"},{"key":"10_CR16","unstructured":"Jurczyk, M.: One font vulnerability to rule them all #2: Adobe reader RCE exploitation, August 2015"},{"key":"10_CR17","unstructured":"Li, X., Szor, P.: Emerging stack pivoting exploits bypass common security, May 2013"},{"key":"10_CR18","unstructured":"Microsoft. Data execution prevention"},{"issue":"49","key":"10_CR19","first-page":"14","volume":"7","author":"A One","year":"1996","unstructured":"One, A.: Smashing the stack for fun and profit. Phrack 7(49), 14\u201316 (1996)","journal-title":"Phrack"},{"key":"10_CR20","unstructured":"Pappas, V., Polychronakis, M., Keromytis, A.D.: Transparent rop exploit mitigation using indirect branch tracing. In: Proceedings of the 22Nd USENIX Conference on Security, SEC 2013, pp. 447\u2013462. USENIX, Berkeley (2013)"},{"key":"10_CR21","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"144","DOI":"10.1007\/978-3-319-20550-2_8","volume-title":"Detection of Intrusions and Malware, and Vulnerability Assessment","author":"M Payer","year":"2015","unstructured":"Payer, M., Barresi, A., Gross, T.R.: Fine-grained control-flow integrity through binary hardening. In: Almgren, M., Gulisano, V., Maggi, F. (eds.) DIMVA 2015. LNCS, vol. 9148, pp. 144\u2013164. Springer, Heidelberg (2015)"},{"key":"10_CR22","unstructured":"Pi, P.: Unpatched flash player flaw, more POCs found in hacking team leak, July 2015"},{"key":"10_CR23","unstructured":"Ramakesavan, R., Zimmerman, D., Singaravelu, P.: Intel memory protection extensions (intel mpx) enabling guide, April 2015"},{"issue":"1","key":"10_CR24","doi-asserted-by":"publisher","first-page":"2:1","DOI":"10.1145\/2133375.2133377","volume":"15","author":"R Roemer","year":"2012","unstructured":"Roemer, R., Buchanan, E., Shacham, H., Savage, S.: Return-oriented programming: Systems, languages, and applications. ACM Trans. Inf. Syst. Secur. 15(1), 2:1\u20132:34 (2012)","journal-title":"ACM Trans. Inf. Syst. Secur."},{"key":"10_CR25","doi-asserted-by":"crossref","unstructured":"Schuster, F., Tendyck, T., Liebchen, C., Davi, L., Sadeghi, A.-R., Holz, T.: Counterfeit object-oriented programming: On the difficulty of preventing code reuse attacks in C++ applications. In: 36th IEEE Symposium on Security and Privacy (Oakland), May 2015","DOI":"10.1109\/SP.2015.51"},{"key":"10_CR26","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"crossref","first-page":"88","DOI":"10.1007\/978-3-319-11379-1_5","volume-title":"Research in Attacks, Intrusions and Defenses","author":"F Schuster","year":"2014","unstructured":"Schuster, F., Tendyck, T., Pewny, J., Maa\u00df, A., Steegmanns, M., Contag, M., Holz, T.: Evaluating the effectiveness of current anti-ROP defenses. In: Stavrou, A., Bos, H., Portokalidis, G. (eds.) RAID 2014. LNCS, vol. 8688, pp. 88\u2013108. Springer, Heidelberg (2014)"},{"key":"10_CR27","unstructured":"Schwartz, E.J., Avgerinos, T., Brumley, D.: Q: Exploit hardening made easy. In: Proceedings of the 20th USENIX Conference on Security, SEC 2011, pp. 25\u201325. USENIX Association, Berkeley (2011)"},{"key":"10_CR28","unstructured":"Serna, F.J.: The info leak era of software exploitation (2012)"},{"key":"10_CR29","doi-asserted-by":"crossref","unstructured":"Shacham, H.: The geometry of innocent flesh on the bone: return-into-libc without function calls (on the x86). In: Proceedings of the 14th ACM Conference on Computer and Communications Security, CCS 2007, pp. 552\u2013561. ACM, New York (2007)","DOI":"10.1145\/1315245.1315313"},{"key":"10_CR30","doi-asserted-by":"crossref","unstructured":"Snow, K.Z., Monrose, F., Davi, L., Dmitrienko, A., Liebchen, C., Sadeghi, A.-R.: Just-in-time code reuse: On the effectiveness of fine-grained address space layout randomization. In: Proceedings of the IEEE Symposium on Security and Privacy, SP 2013, pp. 574\u2013588 (2013)","DOI":"10.1109\/SP.2013.45"},{"key":"10_CR31","doi-asserted-by":"crossref","unstructured":"Sotirov, A.: Heap feng shui in javascript (2007)","DOI":"10.1215\/00265667-2007-69-7"},{"key":"10_CR32","unstructured":"Tice, C., Roeder, T., Collingbourne, P., Checkoway, S., Erlingsson, \u00da., Lozano, L., Pike, G.: Enforcing forward-edge control-flow integrity in GCC & LLVM. In: 23rd USENIX Security Symposium (USENIX Security 14), pp. 941\u2013955. USENIX Association, San Diego, August 2014"},{"key":"10_CR33","doi-asserted-by":"crossref","unstructured":"van der Veen, V., Andriesse, D., G\u00f6kta\u015f, E., Gras, B., Sambuc, L., Slowinska, A., Bos, H., Giuffrida, C.: Practical context-sensitive CFI. In: Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security, CCS 2015, pp. 927\u2013940. ACM, New York (2015)","DOI":"10.1145\/2810103.2813673"},{"key":"10_CR34","unstructured":"Zhang, M., Sekar, R.: Control flow integrity for COTS binaries. In: Proceedings of the 22Nd USENIX Conference on Security, SEC 2013, pp. 337\u2013352. USENIX Association, Berkeley (2013)"}],"container-title":["Lecture Notes in Computer Science","Engineering Secure Software and Systems"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-319-30806-7_10","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2020,1,8]],"date-time":"2020-01-08T14:59:00Z","timestamp":1578495540000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-319-30806-7_10"}},"subtitle":["Towards a Metric to Measure Gadget Quality"],"short-title":[],"issued":{"date-parts":[[2016]]},"ISBN":["9783319308050","9783319308067"],"references-count":34,"URL":"https:\/\/doi.org\/10.1007\/978-3-319-30806-7_10","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2016]]}}}