Return-oriented programming (English Wikipedia)

Analysis of information sources in references of the Wikipedia article "Return-oriented programming" in English language version.

Last modified: 17:27:43, 21 July 2026 (UTC)

Ref.Un. Ref.Website

Global rank English rank

1210doi.org

2^nd place

86semanticscholar.org

15^th place

8^th place

66web.archive.org

1^st place

41ncsu.edu

2,653^rd place

1,525^th place

22ucsd.edu

2,146^th place

1,364^th place

22espacenet.com

950^th place

813^th place

22iacr.org

6,361^st place

4,159^th place

11pentest.es

low place

11cpug.org

low place

11microsoft.com

263^rd place

259^th place

11seclists.org

low place

11phrack.org

low place

11suse.com

low place

11shell-storm.org

low place

11fireeye.com

low place

11mit.edu

476^th place

340^th place

11columbia.edu

554^th place

368^th place

11qualcomm.com

6,668^th place

4,715^th place

11phoronix.com

4,058^th place

2,920^th place

11hdl.handle.net

66^th place

34^th place

11arm.com

6,514^th place

4,608^th place

11sipearl.com

low place

11kaist.ac.kr

low place

11cmu.edu

2,125^th place

1,347^th place

arm.com (Global: 6,514^th place; English: 4,608^th place)

developer.arm.com

"Applying PAC and BTI techniques to real code". developer.arm.com. Retrieved 2024-02-04.

cmu.edu (Global: 2,125^th place; English: 1,347^th place)

security.ece.cmu.edu

Cha, Sang Kil; Pak, Brian; Brumley, David; Lipton, Richard Jay (2010-10-08) [2010-10-04]. Platform-Independent Programs (PDF). Proceedings of the 17th ACM conference on Computer and Communications Security (CCS'10). Chicago, Illinois, USA: Carnegie Mellon University, Pittsburgh, Pennsylvania, USA / Georgia Institute of Technology, Atlanta, Georgia, USA. pp. 547–558. doi:10.1145/1866307.1866369. ISBN 978-1-4503-0244-9. Archived (PDF) from the original on 2022-05-26. Retrieved 2022-05-26. (12 pages) (See also: ) (NB. Uses the term gadget for chunks of program logic, in this case divided into gadget header and gadget body.)

columbia.edu (Global: 554^th place; English: 368^th place)

cs.columbia.edu

Vasilis Pappas. kBouncer: Efficient and Transparent ROP Mitigation. April 2012.

cpug.org (Global: low place; English: low place)

"Thread: CheckPoint Secure Platform Multiple Buffer Overflows". The Check Point User Group. Archived from the original on 2019-09-30.

doi.org (Global: 2^nd place; English: 2^nd place)

Buchanan, E.; Roemer, R.; Shacham, H.; Savage, S. (October 2008). "When Good Instructions Go Bad: Generalizing Return-Oriented Programming to RISC" (PDF). Proceedings of the 15th ACM conference on Computer and communications security - CCS '08. pp. 27–38. doi:10.1145/1455770.1455776. ISBN 978-1-59593-810-7. S2CID 11176570.
Abadi, M. N.; Budiu, M.; Erlingsson, Ú.; Ligatti, J. (November 2005). "Control-Flow Integrity: Principles, Implementations, and Applications". Proceedings of the 12th ACM conference on Computer and communications security - CCS '05. pp. 340–353. doi:10.1145/1102120.1102165. ISBN 1-59593-226-7. S2CID 3339874.
Abadi, M. N.; Budiu, M.; Erlingsson, Ú.; Ligatti, J. (October 2009). "Control-flow integrity principles, implementations, and applications". ACM Transactions on Information and System Security. 13: 1–40. doi:10.1145/1609956.1609960. S2CID 207175177.
Shacham, H. (October 2007). "The geometry of innocent flesh on the bone: return-into-libc without function calls (on the x86)". Proceedings of the 14th ACM conference on Computer and communications security - CCS '07. pp. 552–561. doi:10.1145/1315245.1315313. ISBN 978-1-59593-703-2. S2CID 11639591.
Skowyra, R.; Casteel, K.; Okhravi, H.; Zeldovich, N.; Streilein, W. (October 2013). "Systematic Analysis of Defenses against Return-Oriented Programming" (PDF). Research in Attacks, Intrusions, and Defenses. Lecture Notes in Computer Science. Vol. 8145. pp. 82–102. doi:10.1007/978-3-642-41284-4_5. ISBN 978-3-642-41283-7. Archived from the original (PDF) on 2014-02-22.
Venkat, Ashish; Shamasunder, Sriskanda; Shacham, Hovav; Tullsen, Dean M. (2016-01-01). "HIPStR". Proceedings of the Twenty-First International Conference on Architectural Support for Programming Languages and Operating Systems. ASPLOS '16. New York, NY, USA: ACM. pp. 727–741. doi:10.1145/2872362.2872408. ISBN 9781450340915. S2CID 7853786.
Hiser, J.; Nguyen-Tuong, A.; Co, M.; Hall, M.; Davidson, J. W. (May 2012). "ILR: Where'd My Gadgets Go?". 2012 IEEE Symposium on Security and Privacy. pp. 571–585. doi:10.1109/SP.2012.39. ISBN 978-1-4673-1244-8. S2CID 15696223.
Avanzi, Roberto (2016). The QARMA Block Cipher Family (PDF). IACR Transactions on Symmetric Cryptology (ToSC). Vol. 17 (published 2017-03-08). pp. 4–44. doi:10.13154/tosc.v2017.i1.4-44. Archived from the original (PDF) on 2020-05-13.
Ravichandran, Joseph; Na, Weon Taek; Lang, Jay; Yan, Mengjia (June 2022). "PACMAN: attacking ARM pointer authentication with speculative execution". Proceedings of the 49th Annual International Symposium on Computer Architecture. Association for Computing Machinery. doi:10.1145/3470496.3527429. hdl:1721.1/146470.
Cha, Sang Kil; Pak, Brian; Brumley, David; Lipton, Richard Jay (2010-10-08) [2010-10-04]. Platform-Independent Programs (PDF). Proceedings of the 17th ACM conference on Computer and Communications Security (CCS'10). Chicago, Illinois, USA: Carnegie Mellon University, Pittsburgh, Pennsylvania, USA / Georgia Institute of Technology, Atlanta, Georgia, USA. pp. 547–558. doi:10.1145/1866307.1866369. ISBN 978-1-4503-0244-9. Archived (PDF) from the original on 2022-05-26. Retrieved 2022-05-26. (12 pages) (See also: ) (NB. Uses the term gadget for chunks of program logic, in this case divided into gadget header and gadget body.)

espacenet.com (Global: 950^th place; English: 813^th place)

worldwide.espacenet.com

US 9135435, Venkat, Ashish; Krishnaswamy, Arvind & Yamada, Koichi et al., "Binary translator driven program state relocation", published 2015-09-15, assigned to Intel Corp.
US application 2019347385, Shelly, Asaf, "Security methods and systems by code mutation", published 2019-11-14 , since abandoned.

fireeye.com (Global: low place; English: low place)

[Bennett et al., 2013] James Bennett, Yichong Lin, and Thoufique Haq. The Number of the Beast, 2013. https://www.fireeye.com/blog/threat-research/2013/02/the-number-of-the-beast.html Archived 2017-02-22 at the Wayback Machine

hdl.handle.net (Global: 66^th place; English: 34^th place)

Ravichandran, Joseph; Na, Weon Taek; Lang, Jay; Yan, Mengjia (June 2022). "PACMAN: attacking ARM pointer authentication with speculative execution". Proceedings of the 49th Annual International Symposium on Computer Architecture. Association for Computing Machinery. doi:10.1145/3470496.3527429. hdl:1721.1/146470.

iacr.org (Global: 6,361^st place; English: 4,159^th place)

tosc.iacr.org

Avanzi, Roberto (2016). The QARMA Block Cipher Family (PDF). IACR Transactions on Symmetric Cryptology (ToSC). Vol. 17 (published 2017-03-08). pp. 4–44. doi:10.13154/tosc.v2017.i1.4-44. Archived from the original (PDF) on 2020-05-13.

eprint.iacr.org

Avanzi, Roberto (2016). The QARMA Block Cipher Family (PDF). IACR Transactions on Symmetric Cryptology (ToSC). Vol. 17 (published 2017-03-08). pp. 4–44. doi:10.13154/tosc.v2017.i1.4-44. Archived from the original (PDF) on 2020-05-13.

kaist.ac.kr (Global: low place; English: low place)

softsec.kaist.ac.kr

Cha, Sang Kil; Pak, Brian; Brumley, David; Lipton, Richard Jay (2010-10-08) [2010-10-04]. Platform-Independent Programs (PDF). Proceedings of the 17th ACM conference on Computer and Communications Security (CCS'10). Chicago, Illinois, USA: Carnegie Mellon University, Pittsburgh, Pennsylvania, USA / Georgia Institute of Technology, Atlanta, Georgia, USA. pp. 547–558. doi:10.1145/1866307.1866369. ISBN 978-1-4503-0244-9. Archived (PDF) from the original on 2022-05-26. Retrieved 2022-05-26. (12 pages) (See also: ) (NB. Uses the term gadget for chunks of program logic, in this case divided into gadget header and gadget body.)

microsoft.com (Global: 263^rd place; English: 259^th place)

technet.microsoft.com

Microsoft Windows XP SP2 Data Execution Prevention

mit.edu (Global: 476^th place; English: 340^th place)

web.mit.edu

Skowyra, R.; Casteel, K.; Okhravi, H.; Zeldovich, N.; Streilein, W. (October 2013). "Systematic Analysis of Defenses against Return-Oriented Programming" (PDF). Research in Attacks, Intrusions, and Defenses. Lecture Notes in Computer Science. Vol. 8145. pp. 82–102. doi:10.1007/978-3-642-41284-4_5. ISBN 978-3-642-41283-7. Archived from the original (PDF) on 2014-02-22.

ncsu.edu (Global: 2,653^rd place; English: 1,525^th place)

csc2.ncsu.edu

Li, Jinku; Wang, Zhi; Jiang, Xuxian; Grace, Mike; Bahram, Sina. Defeating return-oriented rootkits with "return-less" kernels. In Proceedings of EuroSys 2010, edited by G. Muller. ACM Press, 195–208.

pentest.es (Global: low place; English: low place)

Vázquez, Hugo (2007-10-01). "Check Point Secure Platform Hack" (PDF). Pentest. Barcelona, Spain: Pentest Consultores. p. 219.

phoronix.com (Global: 4,058^th place; English: 2,920^th place)

"Linux 5.7 For 64-bit ARM Brings In-Kernel Pointer Authentication, Activity Monitors - Phoronix". www.phoronix.com. Retrieved 2020-03-31.

phrack.org (Global: low place; English: low place)

Nergal, Phrack 58 Article 4, return-into-lib(c) exploits

qualcomm.com (Global: 6,668^th place; English: 4,715^th place)

Qualcomm Product Security. "Pointer Authentication on ARMv8.3" (PDF). Qualcomm Technologies Inc. Archived (PDF) from the original on 2020-06-06. Retrieved 2020-06-16. Thus, we designed QARMA, a new family of lightweight tweakable block ciphers.

seclists.org (Global: low place; English: low place)

Solar Designer, Return-into-lib(c) exploits, Bugtraq

semanticscholar.org (Global: 15^th place; English: 8^th place)

api.semanticscholar.org

Buchanan, E.; Roemer, R.; Shacham, H.; Savage, S. (October 2008). "When Good Instructions Go Bad: Generalizing Return-Oriented Programming to RISC" (PDF). Proceedings of the 15th ACM conference on Computer and communications security - CCS '08. pp. 27–38. doi:10.1145/1455770.1455776. ISBN 978-1-59593-810-7. S2CID 11176570.
Abadi, M. N.; Budiu, M.; Erlingsson, Ú.; Ligatti, J. (November 2005). "Control-Flow Integrity: Principles, Implementations, and Applications". Proceedings of the 12th ACM conference on Computer and communications security - CCS '05. pp. 340–353. doi:10.1145/1102120.1102165. ISBN 1-59593-226-7. S2CID 3339874.
Abadi, M. N.; Budiu, M.; Erlingsson, Ú.; Ligatti, J. (October 2009). "Control-flow integrity principles, implementations, and applications". ACM Transactions on Information and System Security. 13: 1–40. doi:10.1145/1609956.1609960. S2CID 207175177.
Shacham, H. (October 2007). "The geometry of innocent flesh on the bone: return-into-libc without function calls (on the x86)". Proceedings of the 14th ACM conference on Computer and communications security - CCS '07. pp. 552–561. doi:10.1145/1315245.1315313. ISBN 978-1-59593-703-2. S2CID 11639591.
Venkat, Ashish; Shamasunder, Sriskanda; Shacham, Hovav; Tullsen, Dean M. (2016-01-01). "HIPStR". Proceedings of the Twenty-First International Conference on Architectural Support for Programming Languages and Operating Systems. ASPLOS '16. New York, NY, USA: ACM. pp. 727–741. doi:10.1145/2872362.2872408. ISBN 9781450340915. S2CID 7853786.
Hiser, J.; Nguyen-Tuong, A.; Co, M.; Hall, M.; Davidson, J. W. (May 2012). "ILR: Where'd My Gadgets Go?". 2012 IEEE Symposium on Security and Privacy. pp. 571–585. doi:10.1109/SP.2012.39. ISBN 978-1-4673-1244-8. S2CID 15696223.

shell-storm.org (Global: low place; English: low place)

Jonathan Salwan and Allan Wirth, ROPgadget - Gadgets finder and auto-roper

sipearl.com (Global: low place; English: low place)

"Control Flow Integrity, anti-malware active protection on Arm64 systems" (PDF). sipearl.com. Retrieved 2024-02-04.

suse.com (Global: low place; English: low place)

users.suse.com

Sebastian Krahmer, x86-64 buffer overflow exploits and the borrowed code chunks exploitation technique, September 28, 2005

ucsd.edu (Global: 2,146^th place; English: 1,364^th place)

cseweb.ucsd.edu

Shacham, Hovav; Buchanan, Erik; Roemer, Ryan; Savage, Stefan. "Return-Oriented Programming: Exploits Without Code Injection". Retrieved 2009-08-12.
Buchanan, E.; Roemer, R.; Shacham, H.; Savage, S. (October 2008). "When Good Instructions Go Bad: Generalizing Return-Oriented Programming to RISC" (PDF). Proceedings of the 15th ACM conference on Computer and communications security - CCS '08. pp. 27–38. doi:10.1145/1455770.1455776. ISBN 978-1-59593-810-7. S2CID 11176570.

web.archive.org (Global: 1^st place; English: 1^st place)

"Thread: CheckPoint Secure Platform Multiple Buffer Overflows". The Check Point User Group. Archived from the original on 2019-09-30.
[Bennett et al., 2013] James Bennett, Yichong Lin, and Thoufique Haq. The Number of the Beast, 2013. https://www.fireeye.com/blog/threat-research/2013/02/the-number-of-the-beast.html Archived 2017-02-22 at the Wayback Machine
Skowyra, R.; Casteel, K.; Okhravi, H.; Zeldovich, N.; Streilein, W. (October 2013). "Systematic Analysis of Defenses against Return-Oriented Programming" (PDF). Research in Attacks, Intrusions, and Defenses. Lecture Notes in Computer Science. Vol. 8145. pp. 82–102. doi:10.1007/978-3-642-41284-4_5. ISBN 978-3-642-41283-7. Archived from the original (PDF) on 2014-02-22.
Avanzi, Roberto (2016). The QARMA Block Cipher Family (PDF). IACR Transactions on Symmetric Cryptology (ToSC). Vol. 17 (published 2017-03-08). pp. 4–44. doi:10.13154/tosc.v2017.i1.4-44. Archived from the original (PDF) on 2020-05-13.
Qualcomm Product Security. "Pointer Authentication on ARMv8.3" (PDF). Qualcomm Technologies Inc. Archived (PDF) from the original on 2020-06-06. Retrieved 2020-06-16. Thus, we designed QARMA, a new family of lightweight tweakable block ciphers.
Cha, Sang Kil; Pak, Brian; Brumley, David; Lipton, Richard Jay (2010-10-08) [2010-10-04]. Platform-Independent Programs (PDF). Proceedings of the 17th ACM conference on Computer and Communications Security (CCS'10). Chicago, Illinois, USA: Carnegie Mellon University, Pittsburgh, Pennsylvania, USA / Georgia Institute of Technology, Atlanta, Georgia, USA. pp. 547–558. doi:10.1145/1866307.1866369. ISBN 978-1-4503-0244-9. Archived (PDF) from the original on 2022-05-26. Retrieved 2022-05-26. (12 pages) (See also: ) (NB. Uses the term gadget for chunks of program logic, in this case divided into gadget header and gadget body.)

Return-oriented programming (English Wikipedia)

arm.com (Global: 6,514th place; English: 4,608th place)

developer.arm.com

cmu.edu (Global: 2,125th place; English: 1,347th place)

security.ece.cmu.edu

columbia.edu (Global: 554th place; English: 368th place)

cs.columbia.edu

cpug.org (Global: low place; English: low place)

doi.org (Global: 2nd place; English: 2nd place)

espacenet.com (Global: 950th place; English: 813th place)

worldwide.espacenet.com

fireeye.com (Global: low place; English: low place)

hdl.handle.net (Global: 66th place; English: 34th place)

iacr.org (Global: 6,361st place; English: 4,159th place)

tosc.iacr.org

eprint.iacr.org

kaist.ac.kr (Global: low place; English: low place)

softsec.kaist.ac.kr

microsoft.com (Global: 263rd place; English: 259th place)

technet.microsoft.com

mit.edu (Global: 476th place; English: 340th place)

web.mit.edu

ncsu.edu (Global: 2,653rd place; English: 1,525th place)

csc2.ncsu.edu

pentest.es (Global: low place; English: low place)

phoronix.com (Global: 4,058th place; English: 2,920th place)

phrack.org (Global: low place; English: low place)

qualcomm.com (Global: 6,668th place; English: 4,715th place)

seclists.org (Global: low place; English: low place)

semanticscholar.org (Global: 15th place; English: 8th place)

api.semanticscholar.org

shell-storm.org (Global: low place; English: low place)

sipearl.com (Global: low place; English: low place)

suse.com (Global: low place; English: low place)

users.suse.com

ucsd.edu (Global: 2,146th place; English: 1,364th place)

cseweb.ucsd.edu

web.archive.org (Global: 1st place; English: 1st place)

arm.com (Global: 6,514^th place; English: 4,608^th place)

cmu.edu (Global: 2,125^th place; English: 1,347^th place)

columbia.edu (Global: 554^th place; English: 368^th place)

doi.org (Global: 2^nd place; English: 2^nd place)

espacenet.com (Global: 950^th place; English: 813^th place)

hdl.handle.net (Global: 66^th place; English: 34^th place)

iacr.org (Global: 6,361^st place; English: 4,159^th place)

microsoft.com (Global: 263^rd place; English: 259^th place)

mit.edu (Global: 476^th place; English: 340^th place)

ncsu.edu (Global: 2,653^rd place; English: 1,525^th place)

phoronix.com (Global: 4,058^th place; English: 2,920^th place)

qualcomm.com (Global: 6,668^th place; English: 4,715^th place)

semanticscholar.org (Global: 15^th place; English: 8^th place)

ucsd.edu (Global: 2,146^th place; English: 1,364^th place)

web.archive.org (Global: 1^st place; English: 1^st place)