{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,22]],"date-time":"2026-09-22T17:33:55Z","timestamp":1790098435968,"version":"4.0.1"},"publisher-location":"Cham","reference-count":34,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783319788128","type":"print"},{"value":"9783319788135","type":"electronic"}],"license":[{"start":{"date-parts":[[2018,1,1]],"date-time":"2018-01-01T00:00:00Z","timestamp":1514764800000},"content-version":"unspecified","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2018]]},"DOI":"10.1007\/978-3-319-78813-5_38","type":"book-chapter","created":{"date-parts":[[2018,4,10]],"date-time":"2018-04-10T06:03:21Z","timestamp":1523340201000},"page":"721-737","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":11,"title":["ROPOB: Obfuscating Binary Code via\u00a0Return Oriented Programming"],"prefix":"10.1007","author":[{"given":"Dongliang","family":"Mu","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jia","family":"Guo","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Wenbiao","family":"Ding","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Zhilong","family":"Wang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Bing","family":"Mao","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Lei","family":"Shi","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2018,4,11]]},"reference":[{"key":"38_CR1","unstructured":"Alliance, B.S.: Global software privacy. http:\/\/globalstudy.bsa.org\/2010\/index.html"},{"key":"38_CR2","doi-asserted-by":"crossref","unstructured":"Linn, C., Debray, S.: Obfuscation of executable code to improve resistance to static disassembly. In: 10th ACM Conference on Computer and Communications Security, pp. 290\u2013299. ACM, October 2003","DOI":"10.1145\/948109.948149"},{"key":"38_CR3","unstructured":"Debray, S.K., Popov, I.V., Andrews, G.R.: Binary obfuscation using signals. In: USENIX Security. USENIX, August 2007"},{"key":"38_CR4","doi-asserted-by":"crossref","unstructured":"Chen, H., et al.: Control flow obfuscation with information flow tracking. In: Proceedings of 42nd Annual IEEE\/ACM International Symposium on Microarchitecture, pp. 391\u2013400. ACM (2009)","DOI":"10.1145\/1669112.1669162"},{"key":"38_CR5","doi-asserted-by":"crossref","unstructured":"Shacham, H.: The geometry of innocent flesh on the bone: return-into-libc without function calls (on the x86). In: Proceedings of the 14th ACM Conference on Computer and Communications Security, pp. 552\u2013561. ACM (2007)","DOI":"10.1145\/1315245.1315313"},{"key":"38_CR6","doi-asserted-by":"crossref","unstructured":"Lu, K., Xiong, S., Gao, D.: Ropsteg: program steganography with return oriented programming. In: Proceedings of 4th ACM Conference on Data and Application Security and Privacy (CODASPY), pp. 265\u2013272. ACM (2014)","DOI":"10.1145\/2557547.2557572"},{"key":"38_CR7","unstructured":"The IDA Pro disassembler and debugger. http:\/\/www.hex-rays.com\/idapro\/"},{"key":"38_CR8","unstructured":"Backes, M., N\u00fcrnberger, S.: Oxymoron: making fine-grained memory randomization practical by allowing code sharing. In: Proceedings of 23rd Usenix Security Symposium, pp. 433\u2013447 (2014)"},{"key":"38_CR9","doi-asserted-by":"crossref","unstructured":"Bletsch, T., Jiang, X., Freeh, V.W., Liang, Z.: Jump-oriented programming: a new class of code-reuse attack. In: Proceedings of 6th ACM Symposium on Information, Computer and Communications Security, pp. 30\u201340. ACM (2011)","DOI":"10.1145\/1966913.1966919"},{"key":"38_CR10","unstructured":"Schwartz, E.J., Avgerinos, T., Brumley, D.: Q: exploit hardening made easy. In: USENIX Security Symposium (2011)"},{"key":"38_CR11","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"101","DOI":"10.1007\/978-3-642-23644-0_6","volume-title":"Recent Advances in Intrusion Detection","author":"K Lu","year":"2011","unstructured":"Lu, K., Zou, D., Wen, W., Gao, D.: Packed, printable, and polymorphic return-oriented programming. In: Sommer, R., Balzarotti, D., Maier, G. (eds.) RAID 2011. LNCS, vol. 6961, pp. 101\u2013120. Springer, Heidelberg (2011). https:\/\/doi.org\/10.1007\/978-3-642-23644-0_6"},{"key":"38_CR12","doi-asserted-by":"crossref","unstructured":"Snow, K.Z., Monrose, F., Davi, L., Dmitrienko, A., Liebchen, C., Sadeghi, A.-R.: Just-in-time code reuse: on the effectiveness of fine-grained address space layout randomization. In: 2013 IEEE Symposium on Security and Privacy (SP), pp. 574\u2013588. IEEE (2013)","DOI":"10.1109\/SP.2013.45"},{"key":"38_CR13","doi-asserted-by":"crossref","unstructured":"Seibert, J., Okkhravi, H., S\u00f6derstr\u00f6m, E.: Information leaks without memory disclosures: remote side channel attacks on diversified code. In: Proceedings of 2014 ACM SIGSAC Conference on Computer and Communications Security, pp. 54\u201365. ACM (2014)","DOI":"10.1145\/2660267.2660309"},{"key":"38_CR14","doi-asserted-by":"crossref","unstructured":"Bittau, A., Belay, A., Mashtizadeh, A., Mazieres, D., Boneh, D.: Hacking blind. In: 2014 IEEE Symposium on Security and Privacy (SP), pp. 227\u2013242. IEEE (2014)","DOI":"10.1109\/SP.2014.22"},{"key":"38_CR15","unstructured":"Wang, T., Lu, K., Lu, L., Chung, S., Lee, W.: Jekyll on iOS: when benign apps become evil. In: Usenix Security, vol. 13 (2013)"},{"key":"38_CR16","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"346","DOI":"10.1007\/978-3-642-18178-8_30","volume-title":"Information Security","author":"L Davi","year":"2011","unstructured":"Davi, L., Dmitrienko, A., Sadeghi, A.-R., Winandy, M.: Privilege escalation attacks on android. In: Burmester, M., Tsudik, G., Magliveras, S., Ili\u0107, I. (eds.) ISC 2010. LNCS, vol. 6531, pp. 346\u2013360. Springer, Heidelberg (2011). https:\/\/doi.org\/10.1007\/978-3-642-18178-8_30"},{"key":"38_CR17","doi-asserted-by":"crossref","unstructured":"Lee, B., Lu, L., Wang, T., Kim, T., Lee, W.: From Zygote to Morula: fortifying weakened ASLR on android. In: 2014 IEEE Symposium on Security and Privacy (SP), pp. 424\u2013439. IEEE (2014)","DOI":"10.1109\/SP.2014.34"},{"issue":"6","key":"38_CR18","doi-asserted-by":"publisher","first-page":"565","DOI":"10.1016\/0167-4048(93)90054-9","volume":"12","author":"FB Cohen","year":"1993","unstructured":"Cohen, F.B.: Operating system protection through program evolution. Comput. Secur. 12(6), 565\u2013584 (1993)","journal-title":"Comput. Secur."},{"key":"38_CR19","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1007\/978-3-642-24861-0_1","volume-title":"Information Security","author":"Z Xin","year":"2011","unstructured":"Xin, Z., Chen, H., Wang, X., Liu, P., Zhu, S., Mao, B., Xie, L.: Replacement attacks on behavior based software birthmark. In: Lai, X., Zhou, J., Li, H. (eds.) ISC 2011. LNCS, vol. 7001, pp. 1\u201316. Springer, Heidelberg (2011). https:\/\/doi.org\/10.1007\/978-3-642-24861-0_1"},{"key":"38_CR20","first-page":"3","volume":"30","author":"T L\u00e1szl\u00f3","year":"2009","unstructured":"L\u00e1szl\u00f3, T., Kiss, \u00c1.: Obfuscating C++ programs via control flow flattening. Annales Universitatis Scientarum Budapestinensis de Rolando E\u00f6tv\u00f6s Nominatae, Sectio Computatorica 30, 3\u201319 (2009)","journal-title":"Annales Universitatis Scientarum Budapestinensis de Rolando E\u00f6tv\u00f6s Nominatae, Sectio Computatorica"},{"key":"38_CR21","doi-asserted-by":"crossref","unstructured":"Sharif, M., Lanzi, A., Giffin, J., Lee, W.: Automatic reverse engineering of malware emulators. In: 2009 30th IEEE Symposium on Security and Privacy, pp. 94\u2013109. IEEE (2009)","DOI":"10.1109\/SP.2009.27"},{"key":"38_CR22","unstructured":"Wang, C.: A security architecture for survivability mechanisms. Ph.D. dissertation, University of Virginia (2001)"},{"key":"38_CR23","unstructured":"Oreans Technologies: Code virtualizer: total obfuscation against reverse engineering. http:\/\/www.oreans.com\/codevirtualizer.php"},{"key":"38_CR24","unstructured":"Oreans Technologies: Themida: advanced windows software protection system. http:\/\/www.oreans.com\/themida.php"},{"key":"38_CR25","unstructured":"VMProtect-Software: VMProtect - new-generation software protection. http:\/\/www.vmprotecct.ru\/"},{"key":"38_CR26","doi-asserted-by":"crossref","unstructured":"Christodorescu, M., Jha, S., Seshia, S.A., Song, D., Bryant, R.E.: Semantics-aware malware detection. In: 2005 IEEE Symposium on Security and Privacy, pp. 32\u201346. IEEE (2005)","DOI":"10.1109\/SP.2005.20"},{"key":"38_CR27","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"207","DOI":"10.1007\/11663812_11","volume-title":"Recent Advances in Intrusion Detection","author":"C Kruegel","year":"2006","unstructured":"Kruegel, C., Kirda, E., Mutz, D., Robertson, W., Vigna, G.: Polymorphic worm detection using structural information of executables. In: Valdes, A., Zamboni, D. (eds.) RAID 2005. LNCS, vol. 3858, pp. 207\u2013226. Springer, Heidelberg (2006). https:\/\/doi.org\/10.1007\/11663812_11"},{"issue":"11","key":"38_CR28","doi-asserted-by":"publisher","first-page":"955","DOI":"10.1109\/TSE.2005.120","volume":"31","author":"A Lakhotia","year":"2005","unstructured":"Lakhotia, A., Kumar, E.U., Venable, M.: A method for detecting obfuscated calls in malicious binaries. IEEE Trans. Softw. Eng. 31(11), 955\u2013968 (2005)","journal-title":"IEEE Trans. Softw. Eng."},{"key":"38_CR29","unstructured":"Singh, P.K., Moinuddin, M., Lakhotia, A.: Using static analysis and verification for analyzing virus and worm programs. In: Proceedings of 2nd European Conference on Information Warfare and Security, pp. 281\u2013292 (2003)"},{"issue":"5","key":"38_CR30","doi-asserted-by":"publisher","first-page":"70","DOI":"10.1145\/358438.349313","volume":"35","author":"Zhichen Xu","year":"2000","unstructured":"Xu, Z., Miller, B.P., Reps, T.: Safety checking of machine code. In: ACM SIGPLAN Notices, vol. 35, pp. 70\u201382. ACM (2000)","journal-title":"ACM SIGPLAN Notices"},{"key":"38_CR31","unstructured":"Guilfanov, I.: Decompilers and beyond. Black Hat USA (2008)"},{"key":"38_CR32","unstructured":"Schwartz, E.J., Lee, J., Woo, M., Brumley, D.: Native x86 decompilation using semantics-preserving structural analysis and iterative control-flow structuring. In: Proceedings of USENIX Security Symposium, p. 16 (2013)"},{"key":"38_CR33","doi-asserted-by":"crossref","unstructured":"Zeng, J., Fu, Y., Miller, K.A., Lin, Z., Zhang, X., Xu, D.: Obfuscation resilient binary code reuse through trace-oriented programming. In: Proceedings of 2013 ACM SIGSAC Conference on Computer & Communications Security, pp. 487\u2013498. ACM (2013)","DOI":"10.1145\/2508859.2516664"},{"key":"38_CR34","doi-asserted-by":"crossref","unstructured":"Wartell, R., Mohan, V., Hamlen, K.W., Lin, Z.: Binary stirring: self-randomizing instruction addresses of legacy x86 binary code. In: Proceedings of 2012 ACM Conference on Computer and Communications Security, pp. 157\u2013168. ACM (2012)","DOI":"10.1145\/2382196.2382216"}],"container-title":["Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering","Security and Privacy in Communication Networks"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-319-78813-5_38","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,10,14]],"date-time":"2019-10-14T17:56:32Z","timestamp":1571075792000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-319-78813-5_38"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2018]]},"ISBN":["9783319788128","9783319788135"],"references-count":34,"URL":"https:\/\/doi.org\/10.1007\/978-3-319-78813-5_38","relation":{},"ISSN":["1867-8211","1867-822X"],"issn-type":[{"value":"1867-8211","type":"print"},{"value":"1867-822X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2018]]}}}