{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,9,10]],"date-time":"2025-09-10T22:35:40Z","timestamp":1757543740869},"publisher-location":"Cham","reference-count":26,"publisher":"Springer International Publishing","isbn-type":[{"type":"print","value":"9783319455716"},{"type":"electronic","value":"9783319455723"}],"license":[{"start":{"date-parts":[[2016,1,1]],"date-time":"2016-01-01T00:00:00Z","timestamp":1451606400000},"content-version":"unspecified","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2016]]},"DOI":"10.1007\/978-3-319-45572-3_4","type":"book-chapter","created":{"date-parts":[[2016,8,20]],"date-time":"2016-08-20T08:24:52Z","timestamp":1471681492000},"page":"60-81","source":"Crossref","is-referenced-by-count":3,"title":["Runtime Integrity Checking for Exploit Mitigation on Lightweight Embedded Devices"],"prefix":"10.1007","author":[{"given":"Matthias","family":"Neugschwandtner","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Collin","family":"Mulliner","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"William","family":"Robertson","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Engin","family":"Kirda","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2016,8,21]]},"reference":[{"doi-asserted-by":"crossref","unstructured":"Abadi, M., Budiu, M., Erlingsson, U., Ligatti, J.: Control-flow integrity. In: ACM Conference on Computer and Communications Security (CCS) (2005)","key":"4_CR1","DOI":"10.1145\/1102120.1102165"},{"unstructured":"Andersen, S., Abella, V.: Data Execution Prevention. Changes to Functionality in Microsoft Windows XP Service Pack 2, Part 3: Memory Protection Technologies (2004)","key":"4_CR2"},{"unstructured":"Baume, T.: Netcomm NB5 Botnet Psyb0t. http:\/\/baume.id.au\/psyb0t\/PSYB0T.pdf","key":"4_CR3"},{"doi-asserted-by":"crossref","unstructured":"Cheng, Y., Zhou, Z., Yu, M., Ding, X., Deng, R.: ROPecker: a generic and practical approach for defending against ROP attacks. In: Network and Distributed System Security Symposium (NDSS) (2013)","key":"4_CR4","DOI":"10.14722\/ndss.2014.23156"},{"unstructured":"Heffner, C.: OSVDB 86824 Exploit. http:\/\/www.devttys0.com\/wp-content\/uploads\/2012\/10\/dir605l_exploit.txt","key":"4_CR5"},{"doi-asserted-by":"crossref","unstructured":"Davi, L., Hanreich, M., Paul, D., Sadeghi, A.R., Koeberl, P., Sullivan, D., Arias, O., Jin, Y.: HAFIX: Hardware-assisted flow integrity extension. In: Proceedings of the Annual Design Automation Conference (2015)","key":"4_CR6","DOI":"10.1145\/2744769.2744847"},{"doi-asserted-by":"crossref","unstructured":"Feng, H.H., Kolesnikov, O.M., Fogla, P., Lee, W., Gong, W.: Anomaly detection using call stack information. In: IEEE Symposium on Security and Privacy (Oakland) (2003)","key":"4_CR7","DOI":"10.1109\/SECPRI.2003.1199328"},{"doi-asserted-by":"crossref","unstructured":"Goektas, E., Athanasopoulos, E., Bos, H., Portokalidis, G.: Out of control: overcoming control-flow integrity. In: IEEE Symposium on Security and Privacy (Oakland) (2014)","key":"4_CR8","DOI":"10.1109\/SP.2014.43"},{"unstructured":"Holcomb, J.: CVE-2013-465 Exploit. http:\/\/www.exploit-db.com\/exploits\/27133\/","key":"4_CR9"},{"key":"4_CR10","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"crossref","first-page":"326","DOI":"10.1007\/978-3-540-39650-5_19","volume-title":"Computer Security \u2013 ESORICS 2003","author":"C Kruegel","year":"2003","unstructured":"Kruegel, C., Mutz, D., Valeur, F., Vigna, G.: On the detection of anomalous system call arguments. In: Snekkenes, E., Gollmann, D. (eds.) ESORICS 2003. LNCS, vol. 2808, pp. 326\u2013343. Springer, Heidelberg (2003)"},{"unstructured":"Kuznetsov, V., Szekeres, L., Payer, M., Candea, G., Sekar, R., Song, D.: Code-pointer integrity. In: USENIX Symposium on Operating Systems Design and Implementation (OSDI) (2014)","key":"4_CR11"},{"unstructured":"McVoy, L., Staelin, C.: Lmbench: portable tools for performance analysis. In: USENIX Annual Technical Conference (USENIX ATC) (1996)","key":"4_CR12"},{"unstructured":"Pappas, V., Polychronakis, M., Keromytis, A.D.: Transparent ROP exploit mitigation using indirect branch tracing. In: USENIX Security Symposium (USENIX SEC) (2013)","key":"4_CR13"},{"unstructured":"Provos, N.: Improving host security with system call policies. In: USENIX Security Symposium (USENIX SEC) (2003)","key":"4_CR14"},{"doi-asserted-by":"crossref","unstructured":"Schuster, F., Tendyck, T., Liebchen, C., Davi, L., Sadeghi, A.R., Holz, T.: Counterfeit object-oriented programming: on the difficulty of preventing code reuse attacks in C++ applications. In: IEEE Symposium on Security and Privacy (Oakland) (2015)","key":"4_CR15","DOI":"10.1109\/SP.2015.51"},{"doi-asserted-by":"crossref","unstructured":"Shu, X., Yao, D., Ramakrishnan, N.: Unearthing stealthy program attacks buried in extremely long execution paths. In: ACM SIGSAC Conference on Computer and Communications Security (CCS) (2015)","key":"4_CR16","DOI":"10.1145\/2810103.2813654"},{"doi-asserted-by":"crossref","unstructured":"Szekeres, L., Payer, M., Wei, T., Song, D.: SoK: eternal war in memory. In: IEEE Symposium on Security and Privacy (Oakland) (2013)","key":"4_CR17","DOI":"10.1109\/SP.2013.13"},{"unstructured":"Cymru, T.: SOHO Pharming (2014). https:\/\/www.team-cymru.com\/ReadingRoom\/Whitepapers\/2013\/TeamCymruSOHOPharming.pdf","key":"4_CR18"},{"unstructured":"Ullrich, J.: Linksys Worm The Moon (2014). https:\/\/isc.sans.edu\/forums\/diary\/Linksys+Worm+TheMoon+Summary+What+we+know+so+far\/17633","key":"4_CR19"},{"unstructured":"Vaughan, J.A., Hilton, A.D.: Paladin: Helping Programs Help Themselves with Internal System Call Interposition (2010)","key":"4_CR20"},{"doi-asserted-by":"crossref","unstructured":"van der Veen, V., Andriesse, D., G\u00f6kta\u015f, E., Gras, B., Sambuc, L., Slowinska, A., Bos, H., Giuffrida, C.: Practical context-sensitive CFI. In: ACM Conference on Computer and Communications Security (CCS) (2015)","key":"4_CR21","DOI":"10.1145\/2810103.2813673"},{"key":"4_CR22","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"crossref","first-page":"86","DOI":"10.1007\/978-3-642-33338-5_5","volume-title":"Research in Attacks, Intrusions, and Defenses","author":"V Veen van der","year":"2012","unstructured":"van der Veen, V., dutt-Sharma, N., Cavallaro, L., Bos, H.: Memory errors: the past, the present, and the future. In: Balzarotti, D., Stolfo, S.J., Cova, M. (eds.) RAID 2012. LNCS, vol. 7462, pp. 86\u2013106. Springer, Heidelberg (2012)"},{"doi-asserted-by":"crossref","unstructured":"Wagner, D., Dean, D.: Intrusion detection via static analysis. In: IEEE Symposium on Security and Privacy (Oakland) (2001)","key":"4_CR23","DOI":"10.1109\/SECPRI.2001.924296"},{"doi-asserted-by":"crossref","unstructured":"Wagner, D., Soto, P.: Mimicry attacks on host-based intrusion detection systems. In: ACM Conference on Computer and Communications Security (CCS) (2002)","key":"4_CR24","DOI":"10.1145\/586110.586145"},{"unstructured":"Zhang, M., Sekar, R.: Control flow integrity for COTS binaries. In: USENIX Security Symposium (USENIX SEC) (2013)","key":"4_CR25"},{"doi-asserted-by":"crossref","unstructured":"Zhou, Y., Wang, X., Chen, Y., Wang, Z.: ARMlock: hardware-based fault isolation for ARM. In: ACM Conference on Computer and Communications Security (CCS), November 2014","key":"4_CR26","DOI":"10.1145\/2660267.2660344"}],"container-title":["Lecture Notes in Computer Science","Trust and Trustworthy Computing"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-319-45572-3_4","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,9,12]],"date-time":"2019-09-12T20:25:01Z","timestamp":1568319901000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-319-45572-3_4"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2016]]},"ISBN":["9783319455716","9783319455723"],"references-count":26,"URL":"https:\/\/doi.org\/10.1007\/978-3-319-45572-3_4","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2016]]}}}