{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,30]],"date-time":"2026-09-30T09:53:46Z","timestamp":1790762026580,"version":"4.1.0"},"reference-count":54,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2015,4]]},"DOI":"10.1109\/infocom.2015.7218424","type":"proceedings-article","created":{"date-parts":[[2015,8,24]],"date-time":"2015-08-24T17:33:36Z","timestamp":1440437616000},"page":"567-575","source":"Crossref","is-referenced-by-count":8,"title":["JITScope: Protecting web users from control-flow hijacking attacks"],"prefix":"10.1109","author":[{"given":"Chao","family":"Zhang","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Mehrdad","family":"Niknami","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Kevin Zhijie","family":"Chen","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Chengyu","family":"Song","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Zhaofeng","family":"Chen","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Dawn","family":"Song","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2015.23233"},{"key":"ref38","article-title":"Code-pointer integrity","author":"kuznetsov","year":"2014","journal-title":"OSDI'14"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/1134285.1134309"},{"key":"ref32","first-page":"17","article-title":"Using valgrind to detect undefined value errors with bit-precision","author":"seward","year":"2005","journal-title":"USENIX Annual Technical Conference General Track"},{"key":"ref31","article-title":"Efficient software-based fault isolation","author":"wahbe","year":"1994","journal-title":"Symposium on Operating Systems Principles (SOSP'99)"},{"key":"ref30","first-page":"941","article-title":"Enforcing forward-edge control-flow integrity in gcc & llvm","author":"tice","year":"2014","journal-title":"23rd USENIX Security Symposium (USENIX Security 14)"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1145\/1806651.1806657"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1145\/1542476.1542504"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/1029894.1029913"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1002\/(SICI)1097-024X(199701)27:1<87::AID-SPE78>3.0.CO;2-P"},{"key":"ref28","article-title":"The info leak era on software exploitation","author":"serna","year":"2012","journal-title":"BlackHat"},{"key":"ref27","article-title":"The geometry of innocent flesh on the bone: Return-into-libc without function calls (on the x86)","author":"shacham","year":"2007","journal-title":"ACM Conference on Computer and Communications Security (CCS)"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2014.43"},{"key":"ref2","first-page":"1","article-title":"Cross-site scripting","author":"spett","year":"2005","journal-title":"SPI Labs"},{"key":"ref1","doi-asserted-by":"crossref","first-page":"28","DOI":"10.1007\/11542322_6","article-title":"Man-in-the-middle in tunnelled authentication protocols","author":"asokan","year":"2005","journal-title":"Security Protocols"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/1993316.1993540"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/CGO.2004.1281665"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2660281"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23287"},{"key":"ref23","article-title":"StackGuard: Automatic adaptive detection and prevention of buffer-overflow attack","author":"cowan","year":"1998","journal-title":"USENIX Security Symposium"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/1030083.1030124"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2015.23099"},{"key":"ref50","article-title":"Sunspider 1.0.2 javascript benchmark suite","year":"2014"},{"key":"ref51","article-title":"LiteBrite: HTML, CSS and JavaScript Performance Benchmark","year":"2014"},{"key":"ref54","article-title":"Exploiting the jemalloc memory allocator: Owning firefoxi-s heap patroklos","author":"argyroudis","year":"0","journal-title":"BlackHat USA 2012"},{"key":"ref53","article-title":"Peacekeeper: HTML5 browser speed test","year":"2014","journal-title":"com\/"},{"key":"ref52","article-title":"Browsermark 2.1 benchmark","year":"2014"},{"key":"ref10","first-page":"58","article-title":"Modular control-flow integrity","author":"niu","year":"2014","journal-title":"Proceedings of the ACM SIGPLAN Conference on Programming Language Design and Implementation"},{"key":"ref11","article-title":"Engineering heap overflow exploits with JavaScript","author":"daniel","year":"2008","journal-title":"Workshop on Offensive Technologies (WOOT)"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1049\/iet-ifs.2012.0142"},{"key":"ref12","article-title":"Pwn2own 2010 windows 7 internet explorer 8 exploit","author":"vreugdenhil","year":"2010"},{"key":"ref13","article-title":"Rops are for the 99%","author":"yu","year":"2014","journal-title":"The 14th Annual CanSecWest Conference"},{"key":"ref14","article-title":"Interpreter exploitation","author":"blazakis","year":"2010"},{"key":"ref15","article-title":"Interpreter exploitation: Pointer inference and jit spraying","author":"blazakis","year":"2010","journal-title":"Blackhat DC"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2015.23288"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2015.23209"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516675"},{"key":"ref19","first-page":"323","article-title":"Insert: Protect dynamic code generation against spraying","author":"wei","year":"2011","journal-title":"Information Science and Technology (ICIST) 2011 International Conference on"},{"key":"ref4","article-title":"PaX address space layout randomization (ASLR)","year":"2003"},{"key":"ref3","article-title":"The cross-site request forgery (csrf\/xsrf) faq","volume":"17","author":"auger","year":"2008","journal-title":"CGISecurity com Apr"},{"key":"ref6","article-title":"Control-flow in-tegrity","author":"abadi","year":"2005","journal-title":"ACM Conference on Computer and Communications Security (CCS)"},{"key":"ref5","article-title":"Data Execution Prevention: Changes to Functionality in Microsoft Windows XP Service Pack 2, Part 3: Memory Protection Technologies","author":"andersen","year":"2004"},{"key":"ref8","first-page":"337","article-title":"Control flow integrity for cots binaries","author":"zhang","year":"2013","journal-title":"Usenix Security"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2013.44"},{"key":"ref49","article-title":"Kraken 1.1 javascript benchmark suite","year":"2014"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2010.30"},{"key":"ref46","article-title":"Mobile Pwn2Own Autumn 2013 - Chrome on Android - Exploit Writeup","author":"pie","year":"2013"},{"key":"ref45","article-title":"Non-control-data attacks are realistic threats","author":"chen","year":"2005","journal-title":"USENIX Security Symposium"},{"key":"ref48","article-title":"Octane JavaScript benchmark suite","year":"2014"},{"key":"ref47","article-title":"A &#x201C;stack smashing&#x201D; technique protection tool for Linuxx","year":"2000"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1002\/spe.4380180902"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-21424-0_12"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1007\/BFb0057013"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1145\/800017.800542"}],"event":{"name":"IEEE INFOCOM 2015 - IEEE Conference on Computer Communications","location":"Kowloon, Hong Kong","start":{"date-parts":[[2015,4,26]]},"end":{"date-parts":[[2015,5,1]]}},"container-title":["2015 IEEE Conference on Computer Communications (INFOCOM)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/7172813\/7218353\/07218424.pdf?arnumber=7218424","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2017,6,23]],"date-time":"2017-06-23T14:12:50Z","timestamp":1498227170000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/7218424\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2015,4]]},"references-count":54,"URL":"https:\/\/doi.org\/10.1109\/infocom.2015.7218424","relation":{},"subject":[],"published":{"date-parts":[[2015,4]]}}}