Return-oriented programming (English Wikipedia)

Analysis of information sources in references of the Wikipedia article "Return-oriented programming" in English language version.

refsWebsite

Global rank English rank

10doi.org

2^nd place

6semanticscholar.org

11^th place

8^th place

4web.archive.org

1^st place

2ucsd.edu

1,933^rd place

1,342^nd place

2espacenet.com

800^th place

676^th place

2iacr.org

5,032^nd place

3,357^th place

1pentest.es

low place

1cpug.org

low place

1microsoft.com

153^rd place

151^st place

1seclists.org

low place

1phrack.org

low place

1suse.com

low place

1shell-storm.org

low place

1fireeye.com

low place

1mit.edu

415^th place

327^th place

1columbia.edu

488^th place

374^th place

1ncsu.edu

2,542^nd place

1,675^th place

1qualcomm.com

7,092^nd place

5,084^th place

1phoronix.com

4,683^rd place

3,096^th place

1handle.net

102^nd place

76^th place

1arm.com

4,773^rd place

3,130^th place

1sipearl.com

low place

1kaist.ac.kr

low place

1cmu.edu

1,564^th place

1,028^th place

arm.com (Global: 4,773^rd place; English: 3,130^th place)

developer.arm.com

"Applying PAC and BTI techniques to real code". developer.arm.com. Retrieved 2024-02-04.

cmu.edu (Global: 1,564^th place; English: 1,028^th place)

security.ece.cmu.edu

Cha, Sang Kil; Pak, Brian; Brumley, David; Lipton, Richard Jay (2010-10-08) [2010-10-04]. Platform-Independent Programs (PDF). Proceedings of the 17th ACM conference on Computer and Communications Security (CCS'10). Chicago, Illinois, USA: Carnegie Mellon University, Pittsburgh, Pennsylvania, USA / Georgia Institute of Technology, Atlanta, Georgia, USA. pp. 547–558. doi:10.1145/1866307.1866369. ISBN 978-1-4503-0244-9. Archived (PDF) from the original on 2022-05-26. Retrieved 2022-05-26. [1] (12 pages) (See also: [2]) (NB. Uses the term gadget for chunks of program logic, in this case divided into gadget header and gadget body.)

columbia.edu (Global: 488^th place; English: 374^th place)

cs.columbia.edu

Vasilis Pappas. kBouncer: Efficient and Transparent ROP Mitigation. April 2012.

cpug.org (Global: low place; English: low place)

"Thread: CheckPoint Secure Platform Multiple Buffer Overflows". The Check Point User Group.

doi.org (Global: 2^nd place; English: 2^nd place)

Buchanan, E.; Roemer, R.; Shacham, H.; Savage, S. (October 2008). "When Good Instructions Go Bad: Generalizing Return-Oriented Programming to RISC" (PDF). Proceedings of the 15th ACM conference on Computer and communications security - CCS '08. pp. 27–38. doi:10.1145/1455770.1455776. ISBN 978-1-59593-810-7. S2CID 11176570.
Abadi, M. N.; Budiu, M.; Erlingsson, Ú.; Ligatti, J. (November 2005). "Control-Flow Integrity: Principles, Implementations, and Applications". Proceedings of the 12th ACM conference on Computer and communications security - CCS '05. pp. 340–353. doi:10.1145/1102120.1102165. ISBN 1-59593-226-7. S2CID 3339874.
Abadi, M. N.; Budiu, M.; Erlingsson, Ú.; Ligatti, J. (October 2009). "Control-flow integrity principles, implementations, and applications". ACM Transactions on Information and System Security. 13: 1–40. doi:10.1145/1609956.1609960. S2CID 207175177.
Shacham, H. (October 2007). "The geometry of innocent flesh on the bone: return-into-libc without function calls (on the x86)". Proceedings of the 14th ACM conference on Computer and communications security - CCS '07. pp. 552–561. doi:10.1145/1315245.1315313. ISBN 978-1-59593-703-2. S2CID 11639591.
Skowyra, R.; Casteel, K.; Okhravi, H.; Zeldovich, N.; Streilein, W. (October 2013). "Systematic Analysis of Defenses against Return-Oriented Programming" (PDF). Research in Attacks, Intrusions, and Defenses. Lecture Notes in Computer Science. Vol. 8145. pp. 82–102. doi:10.1007/978-3-642-41284-4_5. ISBN 978-3-642-41283-7. Archived from the original (PDF) on 2014-02-22.
Venkat, Ashish; Shamasunder, Sriskanda; Shacham, Hovav; Tullsen, Dean M. (2016-01-01). "HIPStR". Proceedings of the Twenty-First International Conference on Architectural Support for Programming Languages and Operating Systems. ASPLOS '16. New York, NY, USA: ACM. pp. 727–741. doi:10.1145/2872362.2872408. ISBN 9781450340915. S2CID 7853786.
Hiser, J.; Nguyen-Tuong, A.; Co, M.; Hall, M.; Davidson, J. W. (May 2012). "ILR: Where'd My Gadgets Go?". 2012 IEEE Symposium on Security and Privacy. pp. 571–585. doi:10.1109/SP.2012.39. ISBN 978-1-4673-1244-8. S2CID 15696223.
Avanzi, Roberto (2016). The QARMA Block Cipher Family (PDF). IACR Transactions on Symmetric Cryptology (ToSC). Vol. 17 (published 2017-03-08). pp. 4–44. doi:10.13154/tosc.v2017.i1.4-44. Archived from the original (PDF) on 2020-05-13.
Ravichandran, Joseph; Na, Weon Taek; Lang, Jay; Yan, Mengjia (June 2022). "PACMAN: attacking ARM pointer authentication with speculative execution". Proceedings of the 49th Annual International Symposium on Computer Architecture. Association for Computing Machinery. doi:10.1145/3470496.3527429. hdl:1721.1/146470.
Cha, Sang Kil; Pak, Brian; Brumley, David; Lipton, Richard Jay (2010-10-08) [2010-10-04]. Platform-Independent Programs (PDF). Proceedings of the 17th ACM conference on Computer and Communications Security (CCS'10). Chicago, Illinois, USA: Carnegie Mellon University, Pittsburgh, Pennsylvania, USA / Georgia Institute of Technology, Atlanta, Georgia, USA. pp. 547–558. doi:10.1145/1866307.1866369. ISBN 978-1-4503-0244-9. Archived (PDF) from the original on 2022-05-26. Retrieved 2022-05-26. [1] (12 pages) (See also: [2]) (NB. Uses the term gadget for chunks of program logic, in this case divided into gadget header and gadget body.)

espacenet.com (Global: 800^th place; English: 676^th place)

worldwide.espacenet.com

US 9135435, Venkat, Ashish; Krishnaswamy, Arvind & Yamada, Koichi et al., "Binary translator driven program state relocation", published 2015-09-15, assigned to Intel Corp.
US application 2019347385, Shelly, Asaf, "Security methods and systems by code mutation", published 2019-11-14 , since abandoned.

fireeye.com (Global: low place; English: low place)

[Bennett et al., 2013] James Bennett, Yichong Lin, and Thoufique Haq. The Number of the Beast, 2013. https://www.fireeye.com/blog/threat-research/2013/02/the-number-of-the-beast.html

handle.net (Global: 102^nd place; English: 76^th place)

hdl.handle.net

Ravichandran, Joseph; Na, Weon Taek; Lang, Jay; Yan, Mengjia (June 2022). "PACMAN: attacking ARM pointer authentication with speculative execution". Proceedings of the 49th Annual International Symposium on Computer Architecture. Association for Computing Machinery. doi:10.1145/3470496.3527429. hdl:1721.1/146470.

iacr.org (Global: 5,032^nd place; English: 3,357^th place)

tosc.iacr.org

Avanzi, Roberto (2016). The QARMA Block Cipher Family (PDF). IACR Transactions on Symmetric Cryptology (ToSC). Vol. 17 (published 2017-03-08). pp. 4–44. doi:10.13154/tosc.v2017.i1.4-44. Archived from the original (PDF) on 2020-05-13.

eprint.iacr.org

Avanzi, Roberto (2016). The QARMA Block Cipher Family (PDF). IACR Transactions on Symmetric Cryptology (ToSC). Vol. 17 (published 2017-03-08). pp. 4–44. doi:10.13154/tosc.v2017.i1.4-44. Archived from the original (PDF) on 2020-05-13.

kaist.ac.kr (Global: low place; English: low place)

softsec.kaist.ac.kr

Cha, Sang Kil; Pak, Brian; Brumley, David; Lipton, Richard Jay (2010-10-08) [2010-10-04]. Platform-Independent Programs (PDF). Proceedings of the 17th ACM conference on Computer and Communications Security (CCS'10). Chicago, Illinois, USA: Carnegie Mellon University, Pittsburgh, Pennsylvania, USA / Georgia Institute of Technology, Atlanta, Georgia, USA. pp. 547–558. doi:10.1145/1866307.1866369. ISBN 978-1-4503-0244-9. Archived (PDF) from the original on 2022-05-26. Retrieved 2022-05-26. [1] (12 pages) (See also: [2]) (NB. Uses the term gadget for chunks of program logic, in this case divided into gadget header and gadget body.)

microsoft.com (Global: 153^rd place; English: 151^st place)

technet.microsoft.com

Microsoft Windows XP SP2 Data Execution Prevention

mit.edu (Global: 415^th place; English: 327^th place)

web.mit.edu

Skowyra, R.; Casteel, K.; Okhravi, H.; Zeldovich, N.; Streilein, W. (October 2013). "Systematic Analysis of Defenses against Return-Oriented Programming" (PDF). Research in Attacks, Intrusions, and Defenses. Lecture Notes in Computer Science. Vol. 8145. pp. 82–102. doi:10.1007/978-3-642-41284-4_5. ISBN 978-3-642-41283-7. Archived from the original (PDF) on 2014-02-22.

ncsu.edu (Global: 2,542^nd place; English: 1,675^th place)

csc2.ncsu.edu

Li, Jinku; Wang, Zhi; Jiang, Xuxian; Grace, Mike; Bahram, Sina. Defeating return-oriented rootkits with "return-less" kernels. In Proceedings of EuroSys 2010, edited by G. Muller. ACM Press, 195–208.

pentest.es (Global: low place; English: low place)

Vázquez, Hugo (2007-10-01). "Check Point Secure Platform Hack" (PDF). Pentest. Barcelona, Spain: Pentest Consultores. p. 219.

phoronix.com (Global: 4,683^rd place; English: 3,096^th place)

"Linux 5.7 For 64-bit ARM Brings In-Kernel Pointer Authentication, Activity Monitors - Phoronix". www.phoronix.com. Retrieved 2020-03-31.

phrack.org (Global: low place; English: low place)

Nergal, Phrack 58 Article 4, return-into-lib(c) exploits

qualcomm.com (Global: 7,092^nd place; English: 5,084^th place)

Qualcomm Product Security. "Pointer Authentication on ARMv8.3" (PDF). Qualcomm Technologies Inc. Archived (PDF) from the original on 2020-06-06. Retrieved 2020-06-16. Thus, we designed QARMA, a new family of lightweight tweakable block ciphers.

seclists.org (Global: low place; English: low place)

Solar Designer, Return-into-lib(c) exploits, Bugtraq

semanticscholar.org (Global: 11^th place; English: 8^th place)

api.semanticscholar.org

Buchanan, E.; Roemer, R.; Shacham, H.; Savage, S. (October 2008). "When Good Instructions Go Bad: Generalizing Return-Oriented Programming to RISC" (PDF). Proceedings of the 15th ACM conference on Computer and communications security - CCS '08. pp. 27–38. doi:10.1145/1455770.1455776. ISBN 978-1-59593-810-7. S2CID 11176570.
Abadi, M. N.; Budiu, M.; Erlingsson, Ú.; Ligatti, J. (November 2005). "Control-Flow Integrity: Principles, Implementations, and Applications". Proceedings of the 12th ACM conference on Computer and communications security - CCS '05. pp. 340–353. doi:10.1145/1102120.1102165. ISBN 1-59593-226-7. S2CID 3339874.
Abadi, M. N.; Budiu, M.; Erlingsson, Ú.; Ligatti, J. (October 2009). "Control-flow integrity principles, implementations, and applications". ACM Transactions on Information and System Security. 13: 1–40. doi:10.1145/1609956.1609960. S2CID 207175177.
Shacham, H. (October 2007). "The geometry of innocent flesh on the bone: return-into-libc without function calls (on the x86)". Proceedings of the 14th ACM conference on Computer and communications security - CCS '07. pp. 552–561. doi:10.1145/1315245.1315313. ISBN 978-1-59593-703-2. S2CID 11639591.
Venkat, Ashish; Shamasunder, Sriskanda; Shacham, Hovav; Tullsen, Dean M. (2016-01-01). "HIPStR". Proceedings of the Twenty-First International Conference on Architectural Support for Programming Languages and Operating Systems. ASPLOS '16. New York, NY, USA: ACM. pp. 727–741. doi:10.1145/2872362.2872408. ISBN 9781450340915. S2CID 7853786.
Hiser, J.; Nguyen-Tuong, A.; Co, M.; Hall, M.; Davidson, J. W. (May 2012). "ILR: Where'd My Gadgets Go?". 2012 IEEE Symposium on Security and Privacy. pp. 571–585. doi:10.1109/SP.2012.39. ISBN 978-1-4673-1244-8. S2CID 15696223.

shell-storm.org (Global: low place; English: low place)

Jonathan Salwan and Allan Wirth, ROPgadget - Gadgets finder and auto-roper

sipearl.com (Global: low place; English: low place)

"Control Flow Integrity, anti-malware active protection on Arm64 systems" (PDF). sipearl.com. Retrieved 2024-02-04.

suse.com (Global: low place; English: low place)

users.suse.com

Sebastian Krahmer, x86-64 buffer overflow exploits and the borrowed code chunks exploitation technique, September 28, 2005

ucsd.edu (Global: 1,933^rd place; English: 1,342^nd place)

cseweb.ucsd.edu

Shacham, Hovav; Buchanan, Erik; Roemer, Ryan; Savage, Stefan. "Return-Oriented Programming: Exploits Without Code Injection". Retrieved 2009-08-12.
Buchanan, E.; Roemer, R.; Shacham, H.; Savage, S. (October 2008). "When Good Instructions Go Bad: Generalizing Return-Oriented Programming to RISC" (PDF). Proceedings of the 15th ACM conference on Computer and communications security - CCS '08. pp. 27–38. doi:10.1145/1455770.1455776. ISBN 978-1-59593-810-7. S2CID 11176570.

web.archive.org (Global: 1^st place; English: 1^st place)

Skowyra, R.; Casteel, K.; Okhravi, H.; Zeldovich, N.; Streilein, W. (October 2013). "Systematic Analysis of Defenses against Return-Oriented Programming" (PDF). Research in Attacks, Intrusions, and Defenses. Lecture Notes in Computer Science. Vol. 8145. pp. 82–102. doi:10.1007/978-3-642-41284-4_5. ISBN 978-3-642-41283-7. Archived from the original (PDF) on 2014-02-22.
Avanzi, Roberto (2016). The QARMA Block Cipher Family (PDF). IACR Transactions on Symmetric Cryptology (ToSC). Vol. 17 (published 2017-03-08). pp. 4–44. doi:10.13154/tosc.v2017.i1.4-44. Archived from the original (PDF) on 2020-05-13.
Qualcomm Product Security. "Pointer Authentication on ARMv8.3" (PDF). Qualcomm Technologies Inc. Archived (PDF) from the original on 2020-06-06. Retrieved 2020-06-16. Thus, we designed QARMA, a new family of lightweight tweakable block ciphers.
Cha, Sang Kil; Pak, Brian; Brumley, David; Lipton, Richard Jay (2010-10-08) [2010-10-04]. Platform-Independent Programs (PDF). Proceedings of the 17th ACM conference on Computer and Communications Security (CCS'10). Chicago, Illinois, USA: Carnegie Mellon University, Pittsburgh, Pennsylvania, USA / Georgia Institute of Technology, Atlanta, Georgia, USA. pp. 547–558. doi:10.1145/1866307.1866369. ISBN 978-1-4503-0244-9. Archived (PDF) from the original on 2022-05-26. Retrieved 2022-05-26. [1] (12 pages) (See also: [2]) (NB. Uses the term gadget for chunks of program logic, in this case divided into gadget header and gadget body.)

Return-oriented programming (English Wikipedia)

arm.com (Global: 4,773rd place; English: 3,130th place)

developer.arm.com

cmu.edu (Global: 1,564th place; English: 1,028th place)

security.ece.cmu.edu

columbia.edu (Global: 488th place; English: 374th place)

cs.columbia.edu

cpug.org (Global: low place; English: low place)

doi.org (Global: 2nd place; English: 2nd place)

espacenet.com (Global: 800th place; English: 676th place)

worldwide.espacenet.com

fireeye.com (Global: low place; English: low place)

handle.net (Global: 102nd place; English: 76th place)

hdl.handle.net

iacr.org (Global: 5,032nd place; English: 3,357th place)

tosc.iacr.org

eprint.iacr.org

kaist.ac.kr (Global: low place; English: low place)

softsec.kaist.ac.kr

microsoft.com (Global: 153rd place; English: 151st place)

technet.microsoft.com

mit.edu (Global: 415th place; English: 327th place)

web.mit.edu

ncsu.edu (Global: 2,542nd place; English: 1,675th place)

csc2.ncsu.edu

pentest.es (Global: low place; English: low place)

phoronix.com (Global: 4,683rd place; English: 3,096th place)

phrack.org (Global: low place; English: low place)

qualcomm.com (Global: 7,092nd place; English: 5,084th place)

seclists.org (Global: low place; English: low place)

semanticscholar.org (Global: 11th place; English: 8th place)

api.semanticscholar.org

shell-storm.org (Global: low place; English: low place)

sipearl.com (Global: low place; English: low place)

suse.com (Global: low place; English: low place)

users.suse.com

ucsd.edu (Global: 1,933rd place; English: 1,342nd place)

cseweb.ucsd.edu

web.archive.org (Global: 1st place; English: 1st place)

arm.com (Global: 4,773^rd place; English: 3,130^th place)

cmu.edu (Global: 1,564^th place; English: 1,028^th place)

columbia.edu (Global: 488^th place; English: 374^th place)

doi.org (Global: 2^nd place; English: 2^nd place)

espacenet.com (Global: 800^th place; English: 676^th place)

handle.net (Global: 102^nd place; English: 76^th place)

iacr.org (Global: 5,032^nd place; English: 3,357^th place)

microsoft.com (Global: 153^rd place; English: 151^st place)

mit.edu (Global: 415^th place; English: 327^th place)

ncsu.edu (Global: 2,542^nd place; English: 1,675^th place)

phoronix.com (Global: 4,683^rd place; English: 3,096^th place)

qualcomm.com (Global: 7,092^nd place; English: 5,084^th place)

semanticscholar.org (Global: 11^th place; English: 8^th place)

ucsd.edu (Global: 1,933^rd place; English: 1,342^nd place)

web.archive.org (Global: 1^st place; English: 1^st place)