{"id":"https://openalex.org/W1504053989","doi":"https://doi.org/10.1002/sec.693","title":"Defending return\u2010oriented programming based on virtualization techniques","display_name":"Defending return\u2010oriented programming based on virtualization techniques","publication_year":2013,"publication_date":"2013-01-30","ids":{"openalex":"https://openalex.org/W1504053989","doi":"https://doi.org/10.1002/sec.693","mag":"1504053989"},"language":"en","primary_location":{"id":"doi:10.1002/sec.693","doi":"https://doi.org/10.1002/sec.693","is_oa":false,"landing_page_url":"https://doi.org/10.1002/sec.693","pdf_url":null,"source":{"id":"https://openalex.org/S120683614","display_name":"Security and Communication Networks","issn_l":"1939-0122","issn":["1939-0122","1939-0114"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["ccf-c","cwts-core","poland-20"],"host_organization":"https://openalex.org/P4310319869","host_organization_name":"Hindawi Publishing Corporation","host_organization_lineage":["https://openalex.org/P4310319869","https://openalex.org/P4310320595"],"host_organization_lineage_names":["Hindawi Publishing Corporation","Wiley"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Security and Communication Networks","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5015456692","display_name":"Xiaoqi Jia","orcid":"https://orcid.org/0000-0002-8376-3235","observed_orcids":["https://orcid.org/0000-0002-8376-3235"]},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4391768012","display_name":"State Key Laboratory of Information Security","ror":"https://ror.org/012cr4033","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404","https://openalex.org/I4391768012"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaoqi Jia","raw_affiliation_strings":["State Key Laboratory of Information Security, Institute of Information Engineering Chinese Academy of Sciences Beijing 100195 China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"State Key Laboratory of Information Security, Institute of Information Engineering Chinese Academy of Sciences Beijing 100195 China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404","https://openalex.org/I4391768012"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Rui Wang","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4391768012","display_name":"State Key Laboratory of Information Security","ror":"https://ror.org/012cr4033","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404","https://openalex.org/I4391768012"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Rui Wang","raw_affiliation_strings":["State Key Laboratory of Information Security, Institute of Information Engineering Chinese Academy of Sciences Beijing 100195 China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"State Key Laboratory of Information Security, Institute of Information Engineering Chinese Academy of Sciences Beijing 100195 China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404","https://openalex.org/I4391768012"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5072706004","display_name":"Jun Jiang","orcid":"https://orcid.org/0000-0003-4540-0270","observed_orcids":["https://orcid.org/0000-0003-4540-0270"]},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210128818","display_name":"Institute of Software","ror":"https://ror.org/033dfsn42","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210128818"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jun Jiang","raw_affiliation_strings":["Institute of Software Chinese Academy of Sciences  Beijing 100190 China","Institute of Software, Chinese Academy of Sciences, Beijing 100190, China#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Software Chinese Academy of Sciences  Beijing 100190 China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210128818"]},{"raw_affiliation_string":"Institute of Software, Chinese Academy of Sciences, Beijing 100190, China#TAB#","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210128818"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5027504758","display_name":"Shengzhi Zhang","orcid":"https://orcid.org/0000-0001-9432-9779","observed_orcids":["https://orcid.org/0000-0001-9432-9779"]},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Shengzhi Zhang","raw_affiliation_strings":["Pennsylvania State University, University Park, Pa. 16802, U.S.A"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Pennsylvania State University, University Park, Pa. 16802, U.S.A","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100346828","display_name":"Peng Liu","orcid":"https://orcid.org/0000-0002-5091-8464","observed_orcids":["https://orcid.org/0000-0002-5091-8464","https://orcid.org/0000-0003-4175-504X","https://orcid.org/0000-0003-4929-0531","https://orcid.org/0000-0003-2583-9112","https://orcid.org/0009-0008-0468-432X","https://orcid.org/0000-0002-0492-0029","https://orcid.org/0000-0003-3292-8551","https://orcid.org/0000-0002-7855-3110","https://orcid.org/0000-0002-6694-1693"]},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Peng Liu","raw_affiliation_strings":["Pennsylvania State University, University Park, Pa. 16802, U.S.A"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Pennsylvania State University, University Park, Pa. 16802, U.S.A","institution_ids":["https://openalex.org/I130769515"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":2670,"currency":"USD","value_usd":2670},"apc_paid":null,"fwci":1.298,"has_fulltext":false,"cited_by_count":6,"citation_normalized_percentile":{"value":0.79708805,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":87,"max":95},"biblio":{"volume":"6","issue":"10","first_page":"1236","last_page":"1249"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/return-oriented-programming","display_name":"return-oriented programming","score":0.9990000128746033},{"id":"https://openalex.org/keywords/virtualization","display_name":"virtualization","score":0.5920000076293945},{"id":"https://openalex.org/keywords/code-integrity","display_name":"code integrity","score":0.492000013589859},{"id":"https://openalex.org/keywords/gadgets","display_name":"gadgets","score":0.45500001311302185},{"id":"https://openalex.org/keywords/stack-inspection","display_name":"stack inspection","score":0.6610000133514404},{"id":"https://openalex.org/keywords/xen-hypervisor","display_name":"Xen hypervisor","score":0.7580000162124634},{"id":"https://openalex.org/keywords/runtime-protection","display_name":"runtime protection","score":0.367000013589859},{"id":"https://openalex.org/keywords/code-reuse-attacks","display_name":"code reuse attacks","score":0.41200000047683716}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8904470801353455},{"id":"https://openalex.org/C513985346","wikidata":"https://www.wikidata.org/wiki/Q270471","display_name":"Virtualization","level":3,"score":0.7276828289031982},{"id":"https://openalex.org/C119024030","wikidata":"https://www.wikidata.org/wiki/Q759899","display_name":"Call stack","level":3,"score":0.5778350830078125},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.573806881904602},{"id":"https://openalex.org/C112904061","wikidata":"https://www.wikidata.org/wiki/Q1077480","display_name":"Hypervisor","level":4,"score":0.5239596366882324},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.3350609540939331},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3304906189441681},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.32477623224258423},{"id":"https://openalex.org/C9395851","wikidata":"https://www.wikidata.org/wiki/Q177929","display_name":"Stack (abstract data type)","level":2,"score":0.292675256729126},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.1665153205394745}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1002/sec.693","doi":"https://doi.org/10.1002/sec.693","is_oa":false,"landing_page_url":"https://doi.org/10.1002/sec.693","pdf_url":null,"source":{"id":"https://openalex.org/S120683614","display_name":"Security and Communication Networks","issn_l":"1939-0122","issn":["1939-0122","1939-0114"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["ccf-c","cwts-core","poland-20"],"host_organization":"https://openalex.org/P4310319869","host_organization_name":"Hindawi Publishing Corporation","host_organization_lineage":["https://openalex.org/P4310319869","https://openalex.org/P4310320595"],"host_organization_lineage_names":["Hindawi Publishing Corporation","Wiley"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Security and Communication Networks","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320330412","display_name":"Scheme for Promotion of Academic and Research Collaboration","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":31,"referenced_works":["https://openalex.org/W103986934","https://openalex.org/W1969501726","https://openalex.org/W1982829328","https://openalex.org/W1984187936","https://openalex.org/W2027963645","https://openalex.org/W2029224396","https://openalex.org/W2072633121","https://openalex.org/W2089448621","https://openalex.org/W2091618476","https://openalex.org/W2098010707","https://openalex.org/W2099382052","https://openalex.org/W2101889913","https://openalex.org/W2110756602","https://openalex.org/W2112034658","https://openalex.org/W2112731379","https://openalex.org/W2121468041","https://openalex.org/W2128389850","https://openalex.org/W2133592286","https://openalex.org/W2141389113","https://openalex.org/W2150709728","https://openalex.org/W2156858199","https://openalex.org/W2158699246","https://openalex.org/W2162800072","https://openalex.org/W2162986442","https://openalex.org/W2166462894","https://openalex.org/W2168084064","https://openalex.org/W2170992734","https://openalex.org/W2397854955","https://openalex.org/W2914982603","https://openalex.org/W4239813889","https://openalex.org/W4244704438"],"related_works":["https://openalex.org/W2131234343","https://openalex.org/W2132714796","https://openalex.org/W7095438739","https://openalex.org/W188770049","https://openalex.org/W2209345602","https://openalex.org/W7099910258","https://openalex.org/W4210663461","https://openalex.org/W2604632874","https://openalex.org/W4416233701","https://openalex.org/W2130659827"],"abstract_inverted_index":{"ABSTRACT":[0],"Over":[1],"the":[2,31,108,117,120,126,129,141,155],"past":[3],"few":[4],"years,":[5],"return\u2010oriented":[6,61],"programming":[7],"(ROP)":[8],"has":[9],"drawn":[10],"great":[11],"attention":[12],"of":[13,19,103,112,119,128],"both":[14],"academia":[15],"and":[16,65,88,139,169],"industry.":[17],"Because":[18],"its":[20],"Turing":[21],"completeness,":[22],"ROP":[23,77,104,136],"reuses":[24],"short":[25,80],"instruction":[26,81],"sequences":[27,82],"already":[28],"present":[29],"in":[30,84],"victim":[32],"program's":[33,121],"address":[34],"space":[35],"to":[36,59,73,92,106,131],"perform":[37],"arbitrary":[38],"computation.":[39],"Hence,":[40],"it":[41],"can":[42],"successfully":[43],"bypass":[44],"state\u2010of\u2010the\u2010art":[45],"code":[46],"integrity":[47],"check":[48],"mechanisms.":[49],"In":[50],"this":[51],"paper,":[52],"we":[53,124],"look":[54],"into":[55],"using":[56],"virtualization":[57],"technologies":[58],"defeat":[60],"programming.":[62],"We":[63,97,147],"design":[64],"implement":[66],"HyperCropII,":[67],"a":[68,100,134,150],"virtualization\u2010based":[69],"automatic":[70],"runtime":[71],"approach":[72],"defend":[74],"such":[75],"attacks.":[76],"attackers":[78],"extract":[79],"ending":[83],"ret":[85],"called":[86],"\u201cgadgets\u201d":[87],"craft":[89],"stack":[90,109,130],"content":[91,127],"\u201cchain\u201d":[93],"these":[94],"gadgets":[95],"together.":[96],"observe":[98],"that":[99,114,164],"key":[101],"characteristic":[102],"is":[105,167],"fill":[107],"with":[110],"plenty":[111],"addresses":[113],"are":[115],"within":[116],"range":[118],"libraries.":[122],"Accordingly,":[123],"inspect":[125],"see":[132],"if":[133],"potential":[135],"attack":[137],"exists":[138],"quarantine":[140],"damages":[142],"for":[143],"further":[144],"security":[145],"purposes.":[146],"have":[148],"implemented":[149],"proof\u2010of\u2010concept":[151],"system":[152],"based":[153],"on":[154],"open":[156],"source":[157],"Xen":[158],"hypervisor.":[159],"The":[160],"evaluation":[161],"results":[162],"exhibit":[163],"our":[165],"solution":[166],"effective":[168],"efficient.":[170],"Copyright":[171],"\u00a9":[172],"2013":[173],"John":[174],"Wiley":[175],"&":[176],"Sons,":[177],"Ltd.":[178]},"counts_by_year":[{"year":2023,"cited_by_count":1},{"year":2018,"cited_by_count":1},{"year":2017,"cited_by_count":1},{"year":2016,"cited_by_count":1},{"year":2015,"cited_by_count":2}],"updated_date":"2026-11-12T12:28:57.059296","created_date":"2016-06-24T00:00:00"}