{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,27]],"date-time":"2026-10-27T18:36:23Z","timestamp":1793126183132,"version":"4.5.0"},"publisher-location":"New York, NY, USA","reference-count":31,"publisher":"ACM","license":[{"start":{"date-parts":[[2006,10,20]],"date-time":"2006-10-20T00:00:00Z","timestamp":1161302400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2006,10,20]]},"DOI":"10.1145\/1168857.1168884","type":"proceedings-article","created":{"date-parts":[[2007,1,16]],"date-time":"2007-01-16T20:15:56Z","timestamp":1168978556000},"page":"207-218","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":35,"title":["Comprehensively and efficiently protecting the heap"],"prefix":"10.1145","author":[{"given":"Mazen","family":"Kharbutli","sequence":"first","affiliation":[{"name":"Jordan Univ. of Science and Technology"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xiaowei","family":"Jiang","sequence":"additional","affiliation":[{"name":"North Carolina State University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yan","family":"Solihin","sequence":"additional","affiliation":[{"name":"North Carolina State University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Guru","family":"Venkataramani","sequence":"additional","affiliation":[{"name":"Georgia Institute of Technology"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Milos","family":"Prvulovic","sequence":"additional","affiliation":[{"name":"Georgia Institute of Technology"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2006,10,20]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"Alexander Anisimov Positive Technologies. Defeating Microsoft Windows XP SP2 Heap protection and DEP bypass. http:\/\/www.maxpatrol.com\/defeating-xpsp2-heap-protection.htm 2005.  Alexander Anisimov Positive Technologies. Defeating Microsoft Windows XP SP2 Heap protection and DEP bypass. http:\/\/www.maxpatrol.com\/defeating-xpsp2-heap-protection.htm 2005."},{"issue":"9","key":"e_1_3_2_1_2_1","volume":"57","author":"Anonymous","year":"2001","unstructured":"Anonymous . Once upon a free(). Phrack Magazine , 57 ( 9 ), 2001 . Anonymous. Once upon a free(). Phrack Magazine, 57(9), 2001.","journal-title":"Phrack Magazine"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1145\/1133981.1134000"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1145\/378993.379232"},{"key":"e_1_3_2_1_5_1","first-page":"105","volume-title":"Proc. of the 12th USENIX Security Symp.","author":"Bhatkar S.","year":"2003","unstructured":"S. Bhatkar , D.C. DuVarney , and R. Sekar . Address Obfuscation: an Efficient Approach to Combat a Broad Range of Memory Error Exploits . in Proc. of the 12th USENIX Security Symp. , pages 105 -- 120 , 2003 . S. Bhatkar, D.C. DuVarney, and R. Sekar. Address Obfuscation: an Efficient Approach to Combat a Broad Range of Memory Error Exploits. in Proc. of the 12th USENIX Security Symp., pages 105--120, 2003."},{"key":"e_1_3_2_1_6_1","first-page":"177","volume-title":"Non-Control-Data Attacks Are Realistic Threats. in Proc. of the 14th USENIX Security Symp.","author":"Chen S.","year":"2005","unstructured":"S. Chen , J. Xu , E.C. Sezer , P. Gauriar , and R.K. Iyer . Non-Control-Data Attacks Are Realistic Threats. in Proc. of the 14th USENIX Security Symp. , pages 177 -- 192 , 2005 . S. Chen, J. Xu, E.C. Sezer, P. Gauriar, and R.K. Iyer. Non-Control-Data Attacks Are Realistic Threats. in Proc. of the 14th USENIX Security Symp., pages 177--192, 2005."},{"key":"e_1_3_2_1_7_1","first-page":"91","volume-title":"Proc. of the 12th USENIX Security Symp.","author":"Cowan C.","year":"2003","unstructured":"C. Cowan , S. Beattie , J. Johansen , and P. Wagle . PointGuard: Protecting Pointers from Buffer Overflow Vulnerabilities . in Proc. of the 12th USENIX Security Symp. , pages 91 -- 104 , 2003 . C. Cowan, S. Beattie, J. Johansen, and P. Wagle. PointGuard: Protecting Pointers from Buffer Overflow Vulnerabilities. in Proc. of the 12th USENIX Security Symp., pages 91--104, 2003."},{"key":"e_1_3_2_1_8_1","first-page":"63","volume-title":"StackGuard: Automatic Adaptive Detection and Prevention of Buffer-Overflow Attacks. in Proc. of the 7th USENIX Security Symp.","author":"Cowan C.","year":"1998","unstructured":"C. Cowan , C. Pu , D. Maier , J. Walpole , P. Bakke , S. Beattie , A. Grier , P. Wagle , Q. Zhang , and H. Hinton . StackGuard: Automatic Adaptive Detection and Prevention of Buffer-Overflow Attacks. in Proc. of the 7th USENIX Security Symp. , pages 63 -- 78 , 1998 . C. Cowan, C. Pu, D. Maier, J. Walpole, P. Bakke, S. Beattie, A. Grier, P. Wagle, Q. Zhang, and H. Hinton. StackGuard: Automatic Adaptive Detection and Prevention of Buffer-Overflow Attacks. in Proc. of the 7th USENIX Security Symp., pages 63--78, 1998."},{"key":"e_1_3_2_1_9_1","unstructured":"Darkeagle. Mozzila GIF Image Processing Library Remote Heap Overflow Vulnerability. http:\/\/www.securityfocus.com\/bid\/12881\/exploit 2005.  Darkeagle. Mozzila GIF Image Processing Library Remote Heap Overflow Vulnerability. http:\/\/www.securityfocus.com\/bid\/12881\/exploit 2005."},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1002\/spe.4380240602"},{"key":"e_1_3_2_1_11_1","volume-title":"http:\/\/gee.cs.oswego.edu\/dl\/html\/malloc.html","author":"Lea Doug","year":"2000","unstructured":"Doug Lea . A Memory Allocator . http:\/\/gee.cs.oswego.edu\/dl\/html\/malloc.html , 2000 . Doug Lea. A Memory Allocator. http:\/\/gee.cs.oswego.edu\/dl\/html\/malloc.html, 2000."},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/1024393.1024404"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/1030083.1030124"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1109\/MICRO.2004.26"},{"key":"e_1_3_2_1_15_1","volume-title":"Garbage Collection: Algorithms for Automatic Dynamic Memory Management","author":"Lins Rafael","year":"1996","unstructured":"Jones, Richard, and Rafael Lins . Garbage Collection: Algorithms for Automatic Dynamic Memory Management . John Wiley & Sons , New York , 1996 . Jones, Richard, and Rafael Lins. Garbage Collection: Algorithms for Automatic Dynamic Memory Management. John Wiley & Sons, New York, 1996."},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.5555\/647253.720293"},{"key":"e_1_3_2_1_17_1","volume-title":"Man Pages MSGOP(2)","author":"Manual Linux Programmer's","year":"2002","unstructured":"Linux Programmer's Manual . Man Pages MSGOP(2) . 2002 . Linux Programmer's Manual. Man Pages MSGOP(2). 2002."},{"key":"e_1_3_2_1_18_1","unstructured":"Matt Conover and w00w00 Security Team. w00w00 on Heap Overflows. http:\/\/www.w00w00.org\/files\/articles\/heaptut.txt 1999.  Matt Conover and w00w00 Security Team. w00w00 on Heap Overflows. http:\/\/www.w00w00.org\/files\/articles\/heaptut.txt 1999."},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1109\/MICRO.2004.20"},{"key":"e_1_3_2_1_20_1","unstructured":"PaX Team. PaX Address Space Layout Randomization (ASLR). http:\/\/pax.grsecurity.net\/docs\/aslr.txt 2003.  PaX Team. PaX Address Space Layout Randomization (ASLR). http:\/\/pax.grsecurity.net\/docs\/aslr.txt 2003."},{"key":"e_1_3_2_1_21_1","unstructured":"F. Perriot and P. Szor. An Analysis of the Slapper Worm Exploit. http:\/\/securityresponse.symantec.com\/avcenter\/reference\/analysis.slapper.worm.pdf 2003.  F. Perriot and P. Szor. An Analysis of the Slapper Worm Exploit. http:\/\/securityresponse.symantec.com\/avcenter\/reference\/analysis.slapper.worm.pdf 2003."},{"key":"e_1_3_2_1_22_1","volume-title":"Proc. of the IEEE Intl. Conf","author":"Wojtczuk R.","year":"1998","unstructured":"R. Wojtczuk . Defeating Solar Designer Non-executable Stack Patch. http:\/\/seclists.org\/lists\/bugtraq, experimental study of security vulnerabilities caused by errors . In Proc. of the IEEE Intl. Conf , 1998 . R. Wojtczuk. Defeating Solar Designer Non-executable Stack Patch. http:\/\/seclists.org\/lists\/bugtraq, experimental study of security vulnerabilities caused by errors. In Proc. of the IEEE Intl. Conf, 1998."},{"key":"e_1_3_2_1_23_1","unstructured":"S. Andersen and V. Abella. Data Execution Prevention. Changes to Functionality in Microsoft Windows XP Service Pack 2 Part 3: Memory Protection Technologies. http:\/\/www.microsoft.com\/technet\/prodtechnol\/winxppro\/maintain\/sp2mempr.mspx 2004.  S. Andersen and V. Abella. Data Execution Prevention. Changes to Functionality in Microsoft Windows XP Service Pack 2 Part 3: Memory Protection Technologies. http:\/\/www.microsoft.com\/technet\/prodtechnol\/winxppro\/maintain\/sp2mempr.mspx 2004."},{"key":"e_1_3_2_1_24_1","unstructured":"Security Focus. Wu-Ftpd File Globbing Heap Corruption Vulnerability. http:\/\/www.securityfocus.com\/bid\/3581 2002.  Security Focus. Wu-Ftpd File Globbing Heap Corruption Vulnerability. http:\/\/www.securityfocus.com\/bid\/3581 2002."},{"key":"e_1_3_2_1_25_1","unstructured":"Security Focus. Sudo Password Prompt Heap Overflow Vulnerability. http:\/\/www.securityfocus.com\/bid\/4593 2003.  Security Focus. Sudo Password Prompt Heap Overflow Vulnerability. http:\/\/www.securityfocus.com\/bid\/4593 2003."},{"key":"e_1_3_2_1_26_1","unstructured":"Security Focus. Microsoft Windows winhlp32.exe Heap Overflow Vulnerability. http:\/\/www.securityfocus.com\/archive\/1\/385332\/2004-12-20\/2004-12-26\/2 2004.  Security Focus. Microsoft Windows winhlp32.exe Heap Overflow Vulnerability. http:\/\/www.securityfocus.com\/archive\/1\/385332\/2004-12-20\/2004-12-26\/2 2004."},{"key":"e_1_3_2_1_27_1","volume-title":"Performance Evaluation Corporation. SPEC CPU2000 Benchmarks. http:\/\/www.spec.org\/osg\/cpu2000\/","author":"Standard","year":"2000","unstructured":"Standard Performance Evaluation Corporation. SPEC CPU2000 Benchmarks. http:\/\/www.spec.org\/osg\/cpu2000\/ , 2000 . Standard Performance Evaluation Corporation. SPEC CPU2000 Benchmarks. http:\/\/www.spec.org\/osg\/cpu2000\/, 2000."},{"key":"e_1_3_2_1_28_1","volume-title":"CVS Heap Overflow Vulnerability. www.uscert.gov\/cas\/techalerts\/index.html","author":"CERT.","year":"2004","unstructured":"US- CERT. CVS Heap Overflow Vulnerability. www.uscert.gov\/cas\/techalerts\/index.html , pages TA04-147A, 2004 . US-CERT. CVS Heap Overflow Vulnerability. www.uscert.gov\/cas\/techalerts\/index.html, pages TA04-147A, 2004."},{"key":"e_1_3_2_1_29_1","volume-title":"HTTP Parsing Vulnerabilities in Check Point Firewall-1. www.uscert.gov\/cas\/techalerts\/index.html","author":"CERT.","year":"2004","unstructured":"US- CERT. HTTP Parsing Vulnerabilities in Check Point Firewall-1. www.uscert.gov\/cas\/techalerts\/index.html , pages TA04-036A, 2004 . US-CERT. HTTP Parsing Vulnerabilities in Check Point Firewall-1. www.uscert.gov\/cas\/techalerts\/index.html, pages TA04-036A, 2004."},{"key":"e_1_3_2_1_30_1","first-page":"842160","author":"Microsoft Internet US-CERT.","year":"2004","unstructured":"US-CERT. Microsoft Internet Explorer vulnerable to buffer overflow via FRAME and IFRAME elements. http:\/\/www.kb.cert.org\/vuls\/id\/842160, page VU 842160 , 2004 . US-CERT. Microsoft Internet Explorer vulnerable to buffer overflow via FRAME and IFRAME elements. http:\/\/www.kb.cert.org\/vuls\/id\/842160, page VU 842160, 2004.","journal-title":"VU"},{"key":"e_1_3_2_1_31_1","first-page":"260","volume-title":"Transparent Runtime Randomization for Security. in Proc. of the 22nd Intl. Symp. on Reliable Distributed Systems","author":"Xu J.","year":"2003","unstructured":"J. Xu , Z. Kalbarczyk , and R.K. Iyer . Transparent Runtime Randomization for Security. in Proc. of the 22nd Intl. Symp. on Reliable Distributed Systems , pages 260 -- 269 , 2003 . J. Xu, Z. Kalbarczyk, and R.K. Iyer. Transparent Runtime Randomization for Security. in Proc. of the 22nd Intl. Symp. on Reliable Distributed Systems, pages 260--269, 2003."}],"event":{"name":"ASPLOS06: Architectural Support for Programming Languages and Operating Systems","location":"San Jose California USA","acronym":"ASPLOS06","sponsor":["SIGPLAN ACM Special Interest Group on Programming Languages","SIGOPS ACM Special Interest Group on Operating Systems","ACM Association for Computing Machinery","SIGARCH ACM Special Interest Group on Computer Architecture"]},"container-title":["Proceedings of the 12th international conference on Architectural support for programming languages and operating systems"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1168857.1168884","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1168857.1168884","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T11:14:09Z","timestamp":1750245249000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1168857.1168884"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2006,10,20]]},"references-count":31,"alternative-id":["10.1145\/1168857.1168884","10.1145\/1168857"],"URL":"https:\/\/doi.org\/10.1145\/1168857.1168884","relation":{"is-identical-to":[{"id-type":"doi","id":"10.1145\/1168919.1168884","asserted-by":"object"},{"id-type":"doi","id":"10.1145\/1168917.1168884","asserted-by":"object"},{"id-type":"doi","id":"10.1145\/1168918.1168884","asserted-by":"object"}]},"subject":[],"published":{"date-parts":[[2006,10,20]]},"assertion":[{"value":"2006-10-20","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}