(en) Hovav Shacham, Erik Buchanan, Ryan Roemer et Stefan Savage, Proceedings of the 15th ACM conference on Computer and communications security - CCS '08, , 576p. (ISBN978-1-59593-810-7, DOI10.1145/1455770.1455776, lire en ligne), «When Good Instructions Go Bad: Generalizing Return-Oriented Programming to RISC», p.27–38
(en) M. N. Abadi, M. Budiu, Ú. Erlingsson et J. Ligatti, Proceedings of the 12th ACM conference on Computer and communications security - CCS '05, (ISBN978-1-59593-226-6 et 1-59593-226-7, DOI10.1145/1102120.1102165), «Control-Flow Integrity: Principles, Implementations, and Applications», p.340–353
(en) M. N. Abadi, M. Budiu, Ú. Erlingsson et J. Ligatti, Control-Flow Integrity: Principles, Implementations, and Applications, vol.13, ACM Transactions on Information and System Security, (DOI10.1145/1609956.1609960), p.1
(en) H. Shacham, Proceedings of the 14th ACM conference on Computer and communications security - CCS '07, (ISBN978-1-59593-703-2, DOI10.1145/1315245.1315313), «The geometry of innocent flesh on the bone: return-into-libc without function calls (on the x86)», p.552–561
(en) R. Skowyra, K. Casteel, H. Okhravi, N. Zeldovich et W. Streilein, Research in Attacks, Intrusions, and Defenses, vol.8145, (ISBN978-3-642-41283-7, DOI10.1007/978-3-642-41284-4_5, lire en ligne), «Systematic Analysis of Defenses against Return-Oriented Programming», p.82–102
(en) J. Hiser, A. Nguyen-Tuong, M. Co, M. Hall et J.W. Davidson, 2012 IEEE Symposium on Security and Privacy, (ISBN978-1-4673-1244-8, DOI10.1109/SP.2012.39), «ILR: Where'd My Gadgets Go?», p.571–585
(en) R. Skowyra, K. Casteel, H. Okhravi, N. Zeldovich et W. Streilein, Research in Attacks, Intrusions, and Defenses, vol.8145, (ISBN978-3-642-41283-7, DOI10.1007/978-3-642-41284-4_5, lire en ligne), «Systematic Analysis of Defenses against Return-Oriented Programming», p.82–102
(en) Hovav Shacham, Erik Buchanan, Ryan Roemer et Stefan Savage, Proceedings of the 15th ACM conference on Computer and communications security - CCS '08, , 576p. (ISBN978-1-59593-810-7, DOI10.1145/1455770.1455776, lire en ligne), «When Good Instructions Go Bad: Generalizing Return-Oriented Programming to RISC», p.27–38