{"id":"https://openalex.org/W2527112196","doi":"https://doi.org/10.1007/978-3-319-47364-2_46","title":"Feel Me Flow: A Review of Control-Flow Integrity Methods for User and Kernel Space","display_name":"Feel Me Flow: A Review of Control-Flow Integrity Methods for User and Kernel Space","publication_year":2016,"publication_date":"2016-09-30","ids":{"openalex":"https://openalex.org/W2527112196","doi":"https://doi.org/10.1007/978-3-319-47364-2_46","mag":"2527112196"},"language":"en","primary_location":{"id":"doi:10.1007/978-3-319-47364-2_46","is_oa":true,"landing_page_url":"https://doi.org/10.1007/978-3-319-47364-2_46","pdf_url":null,"source":{"id":"https://openalex.org/S2764905038","display_name":"Advances in intelligent systems and computing","issn_l":"2194-5357","issn":["2194-5357","2194-5365"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"book series"},"license":"cc-by-nc","license_id":"https://openalex.org/licenses/cc-by-nc","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Advances in Intelligent Systems and Computing","raw_type":"book-chapter"},"type":"review","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1007/978-3-319-47364-2_46","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5047051871","display_name":"Irene D\u00edez-Franco","orcid":"https://orcid.org/0009-0009-7994-6555"},"institutions":[{"id":"https://openalex.org/I136040515","display_name":"Universidad de Deusto","ror":"https://ror.org/00ne6sr39","country_code":"ES","type":"education","lineage":["https://openalex.org/I136040515"]}],"countries":["ES"],"is_corresponding":true,"raw_author_name":"Irene D\u00edez-Franco","raw_affiliation_strings":["DeustoTech, University of Deusto, Bilbao, Spain"],"affiliations":[{"raw_affiliation_string":"DeustoTech, University of Deusto, Bilbao, Spain","institution_ids":["https://openalex.org/I136040515"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5058251176","display_name":"Igor Santos","orcid":"https://orcid.org/0000-0002-9511-8612"},"institutions":[{"id":"https://openalex.org/I136040515","display_name":"Universidad de Deusto","ror":"https://ror.org/00ne6sr39","country_code":"ES","type":"education","lineage":["https://openalex.org/I136040515"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Igor Santos","raw_affiliation_strings":["DeustoTech, University of Deusto, Bilbao, Spain"],"affiliations":[{"raw_affiliation_string":"DeustoTech, University of Deusto, Bilbao, Spain","institution_ids":["https://openalex.org/I136040515"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5047051871"],"corresponding_institution_ids":["https://openalex.org/I136040515"],"apc_list":null,"apc_paid":null,"fwci":0.6418,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.68436535,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":94},"biblio":{"volume":null,"issue":null,"first_page":"477","last_page":"486"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9921000003814697,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10478","display_name":"Diamond and Carbon-based Materials Research","score":0.9625999927520752,"subfield":{"id":"https://openalex.org/subfields/2505","display_name":"Materials Chemistry"},"field":{"id":"https://openalex.org/fields/25","display_name":"Materials Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8197383880615234},{"id":"https://openalex.org/keywords/control-flow-graph","display_name":"Control flow graph","score":0.7601602077484131},{"id":"https://openalex.org/keywords/control-flow","display_name":"Control flow","score":0.7229485511779785},{"id":"https://openalex.org/keywords/static-analysis","display_name":"Static analysis","score":0.6632763147354126},{"id":"https://openalex.org/keywords/code-reuse","display_name":"Code reuse","score":0.6251391172409058},{"id":"https://openalex.org/keywords/data-flow-analysis","display_name":"Data-flow analysis","score":0.5557835102081299},{"id":"https://openalex.org/keywords/reuse","display_name":"Reuse","score":0.5504428744316101},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.49111029505729675},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.476661741733551},{"id":"https://openalex.org/keywords/control-flow-analysis","display_name":"Control flow analysis","score":0.47535866498947144},{"id":"https://openalex.org/keywords/static-program-analysis","display_name":"Static program analysis","score":0.44626280665397644},{"id":"https://openalex.org/keywords/mandatory-access-control","display_name":"Mandatory access control","score":0.44111713767051697},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.4295908510684967},{"id":"https://openalex.org/keywords/linux-kernel","display_name":"Linux kernel","score":0.42478618025779724},{"id":"https://openalex.org/keywords/kernel","display_name":"Kernel (algebra)","score":0.41434773802757263},{"id":"https://openalex.org/keywords/memory-safety","display_name":"Memory safety","score":0.4110291600227356},{"id":"https://openalex.org/keywords/data-flow-diagram","display_name":"Data flow diagram","score":0.347023069858551},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.3033282160758972},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.28217533230781555},{"id":"https://openalex.org/keywords/access-control","display_name":"Access control","score":0.23041576147079468},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.17637547850608826},{"id":"https://openalex.org/keywords/compiler","display_name":"Compiler","score":0.1371268630027771},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.11163544654846191}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8197383880615234},{"id":"https://openalex.org/C27458966","wikidata":"https://www.wikidata.org/wiki/Q1187693","display_name":"Control flow graph","level":2,"score":0.7601602077484131},{"id":"https://openalex.org/C160191386","wikidata":"https://www.wikidata.org/wiki/Q868299","display_name":"Control flow","level":2,"score":0.7229485511779785},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.6632763147354126},{"id":"https://openalex.org/C2778583558","wikidata":"https://www.wikidata.org/wiki/Q771245","display_name":"Code reuse","level":3,"score":0.6251391172409058},{"id":"https://openalex.org/C88468194","wikidata":"https://www.wikidata.org/wiki/Q1172416","display_name":"Data-flow analysis","level":3,"score":0.5557835102081299},{"id":"https://openalex.org/C206588197","wikidata":"https://www.wikidata.org/wiki/Q846574","display_name":"Reuse","level":2,"score":0.5504428744316101},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.49111029505729675},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.476661741733551},{"id":"https://openalex.org/C176359209","wikidata":"https://www.wikidata.org/wiki/Q2348963","display_name":"Control flow analysis","level":5,"score":0.47535866498947144},{"id":"https://openalex.org/C137287247","wikidata":"https://www.wikidata.org/wiki/Q1329550","display_name":"Static program analysis","level":4,"score":0.44626280665397644},{"id":"https://openalex.org/C2777407602","wikidata":"https://www.wikidata.org/wiki/Q1888932","display_name":"Mandatory access control","level":4,"score":0.44111713767051697},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.4295908510684967},{"id":"https://openalex.org/C553261973","wikidata":"https://www.wikidata.org/wiki/Q14579","display_name":"Linux kernel","level":2,"score":0.42478618025779724},{"id":"https://openalex.org/C74193536","wikidata":"https://www.wikidata.org/wiki/Q574844","display_name":"Kernel (algebra)","level":2,"score":0.41434773802757263},{"id":"https://openalex.org/C28180684","wikidata":"https://www.wikidata.org/wiki/Q4080983","display_name":"Memory safety","level":3,"score":0.4110291600227356},{"id":"https://openalex.org/C489000","wikidata":"https://www.wikidata.org/wiki/Q747385","display_name":"Data flow diagram","level":2,"score":0.347023069858551},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.3033282160758972},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.28217533230781555},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.23041576147079468},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.17637547850608826},{"id":"https://openalex.org/C169590947","wikidata":"https://www.wikidata.org/wiki/Q47506","display_name":"Compiler","level":2,"score":0.1371268630027771},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.11163544654846191},{"id":"https://openalex.org/C34165917","wikidata":"https://www.wikidata.org/wiki/Q188267","display_name":"Programming paradigm","level":2,"score":0.0},{"id":"https://openalex.org/C50033165","wikidata":"https://www.wikidata.org/wiki/Q15712089","display_name":"Inductive programming","level":3,"score":0.0},{"id":"https://openalex.org/C529173508","wikidata":"https://www.wikidata.org/wiki/Q638608","display_name":"Software development","level":3,"score":0.0},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C114614502","wikidata":"https://www.wikidata.org/wiki/Q76592","display_name":"Combinatorics","level":1,"score":0.0},{"id":"https://openalex.org/C119263510","wikidata":"https://www.wikidata.org/wiki/Q7248501","display_name":"Programming domain","level":4,"score":0.0},{"id":"https://openalex.org/C18903297","wikidata":"https://www.wikidata.org/wiki/Q7150","display_name":"Ecology","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C45567728","wikidata":"https://www.wikidata.org/wiki/Q1702839","display_name":"Role-based access control","level":3,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1007/978-3-319-47364-2_46","is_oa":true,"landing_page_url":"https://doi.org/10.1007/978-3-319-47364-2_46","pdf_url":null,"source":{"id":"https://openalex.org/S2764905038","display_name":"Advances in intelligent systems and computing","issn_l":"2194-5357","issn":["2194-5357","2194-5365"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"book series"},"license":"cc-by-nc","license_id":"https://openalex.org/licenses/cc-by-nc","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Advances in Intelligent Systems and Computing","raw_type":"book-chapter"}],"best_oa_location":{"id":"doi:10.1007/978-3-319-47364-2_46","is_oa":true,"landing_page_url":"https://doi.org/10.1007/978-3-319-47364-2_46","pdf_url":null,"source":{"id":"https://openalex.org/S2764905038","display_name":"Advances in intelligent systems and computing","issn_l":"2194-5357","issn":["2194-5357","2194-5365"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"book series"},"license":"cc-by-nc","license_id":"https://openalex.org/licenses/cc-by-nc","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Advances in Intelligent Systems and Computing","raw_type":"book-chapter"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.7300000190734863}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":54,"referenced_works":["https://openalex.org/W1112477","https://openalex.org/W70478248","https://openalex.org/W1429241971","https://openalex.org/W1459231281","https://openalex.org/W1535810264","https://openalex.org/W1538332098","https://openalex.org/W1544471297","https://openalex.org/W1631846088","https://openalex.org/W1655226010","https://openalex.org/W1816718056","https://openalex.org/W1823377586","https://openalex.org/W1963947298","https://openalex.org/W1964281299","https://openalex.org/W1968002620","https://openalex.org/W1969338270","https://openalex.org/W1969501726","https://openalex.org/W1990465482","https://openalex.org/W1993682390","https://openalex.org/W1993736952","https://openalex.org/W1996931407","https://openalex.org/W2001978806","https://openalex.org/W2006790656","https://openalex.org/W2015083179","https://openalex.org/W2022018347","https://openalex.org/W2022292029","https://openalex.org/W2033029512","https://openalex.org/W2046699259","https://openalex.org/W2059969702","https://openalex.org/W2080313875","https://openalex.org/W2081768685","https://openalex.org/W2086839628","https://openalex.org/W2087612811","https://openalex.org/W2106412703","https://openalex.org/W2109219878","https://openalex.org/W2111927651","https://openalex.org/W2117115928","https://openalex.org/W2121579803","https://openalex.org/W2133592286","https://openalex.org/W2138517425","https://openalex.org/W2146431583","https://openalex.org/W2154847114","https://openalex.org/W2159216827","https://openalex.org/W2162800072","https://openalex.org/W2258876169","https://openalex.org/W2397986719","https://openalex.org/W2512784977","https://openalex.org/W2516933175","https://openalex.org/W2575425722","https://openalex.org/W2578771209","https://openalex.org/W2579099470","https://openalex.org/W2914074464","https://openalex.org/W3011557297","https://openalex.org/W4285719527","https://openalex.org/W6677520968"],"related_works":["https://openalex.org/W157564837","https://openalex.org/W2150418816","https://openalex.org/W2923693513","https://openalex.org/W1770195881","https://openalex.org/W2559098921","https://openalex.org/W1724049288","https://openalex.org/W4389791573","https://openalex.org/W1968803687","https://openalex.org/W1599189938","https://openalex.org/W2527112196"],"abstract_inverted_index":{"Attackers":[0],"have":[1],"evolved":[2],"classic":[3],"code-injection":[4],"attacks,":[5],"such":[6],"as":[7],"those":[8],"caused":[9,30],"by":[10,31],"buffer":[11],"overflows":[12],"to":[13,25,66],"sophisticated":[14],"Turing-complete":[15],"code-reuse":[16],"attacks.":[17],"Control-Flow":[18],"Integrity":[19],"(CFI)":[20],"is":[21,101],"a":[22,44],"defence":[23],"mechanism":[24],"eliminate":[26],"control-flow":[27,46,90],"hijacking":[28],"attacks":[29],"common":[32],"memory":[33],"errors.":[34],"CFI":[35,52,70,78,109],"relies":[36,80],"on":[37,81,96],"static":[38,82],"analysis":[39,83],"for":[40,84],"the":[41,55,58,85,89,99,108,113],"creation":[42],"of":[43,88],"program\u2019s":[45],"graph":[47],"(CFG),":[48],"then":[49],"at":[50],"runtime":[51],"ensures":[53],"that":[54],"program":[56],"follows":[57],"legitimate":[59],"path.":[60],"Thereby,":[61],"when":[62],"an":[63,72],"attacker":[64],"tries":[65],"execute":[67],"malicious":[68],"shellcode,":[69],"detects":[71],"unintended":[73],"path":[74],"and":[75,92,103,117],"aborts":[76],"execution.":[77],"heavily":[79],"accurate":[86],"generation":[87],"graph,":[91],"its":[93],"security":[94,120],"depends":[95],"how":[97],"strictly":[98],"CFG":[100],"generated":[102],"enforced.":[104],"This":[105],"paper":[106],"reviews":[107],"schemes":[110],"proposed":[111],"over":[112],"last":[114],"ten":[115],"years":[116],"assesses":[118],"their":[119],"guarantees":[121],"against":[122],"advanced":[123],"exploitation":[124],"techniques.":[125]},"counts_by_year":[{"year":2018,"cited_by_count":1},{"year":2017,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}