{"id":"https://openalex.org/W4414538773","doi":"https://doi.org/10.1109/icc52391.2025.11161046","title":"Practical Protection Design of Forward-Edge Control-Flow Integrity for Linux Kernel","display_name":"Practical Protection Design of Forward-Edge Control-Flow Integrity for Linux Kernel","publication_year":2025,"publication_date":"2025-06-08","ids":{"openalex":"https://openalex.org/W4414538773","doi":"https://doi.org/10.1109/icc52391.2025.11161046"},"language":"en","primary_location":{"id":"doi:10.1109/icc52391.2025.11161046","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icc52391.2025.11161046","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICC 2025 - IEEE International Conference on Communications","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5077223996","display_name":"Jinmeng Zhou","orcid":null},"institutions":[{"id":"https://openalex.org/I168879160","display_name":"Zhejiang University of Science and Technology","ror":"https://ror.org/05mx0wr29","country_code":"CN","type":"education","lineage":["https://openalex.org/I168879160"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jinmeng Zhou","raw_affiliation_strings":["College of Computer Science and Technology, Zhejiang University,Hangzhou,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology, Zhejiang University,Hangzhou,China","institution_ids":["https://openalex.org/I168879160"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5108898327","display_name":"Ziyue Pan","orcid":null},"institutions":[{"id":"https://openalex.org/I168879160","display_name":"Zhejiang University of Science and Technology","ror":"https://ror.org/05mx0wr29","country_code":"CN","type":"education","lineage":["https://openalex.org/I168879160"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ziyue Pan","raw_affiliation_strings":["College of Computer Science and Technology, Zhejiang University,Hangzhou,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology, Zhejiang University,Hangzhou,China","institution_ids":["https://openalex.org/I168879160"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5053143084","display_name":"Xun Xie","orcid":"https://orcid.org/0000-0003-3715-564X"},"institutions":[{"id":"https://openalex.org/I168879160","display_name":"Zhejiang University of Science and Technology","ror":"https://ror.org/05mx0wr29","country_code":"CN","type":"education","lineage":["https://openalex.org/I168879160"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xun Xie","raw_affiliation_strings":["College of Computer Science and Technology, Zhejiang University,Hangzhou,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology, Zhejiang University,Hangzhou,China","institution_ids":["https://openalex.org/I168879160"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5039734151","display_name":"Wenbo Shen","orcid":"https://orcid.org/0000-0003-2899-6121"},"institutions":[{"id":"https://openalex.org/I168879160","display_name":"Zhejiang University of Science and Technology","ror":"https://ror.org/05mx0wr29","country_code":"CN","type":"education","lineage":["https://openalex.org/I168879160"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wenbo Shen","raw_affiliation_strings":["College of Computer Science and Technology, Zhejiang University,Hangzhou,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology, Zhejiang University,Hangzhou,China","institution_ids":["https://openalex.org/I168879160"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I168879160"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.30027487,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"3370","last_page":"3375"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11181","display_name":"Advanced Data Storage Technologies","score":0.9649999737739563,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11181","display_name":"Advanced Data Storage Technologies","score":0.9649999737739563,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10715","display_name":"Distributed and Parallel Computing Systems","score":0.906499981880188,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9024999737739563,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/linux-kernel","display_name":"Linux kernel","score":0.7204999923706055},{"id":"https://openalex.org/keywords/kernel","display_name":"Kernel (algebra)","score":0.6500999927520752},{"id":"https://openalex.org/keywords/sysfs","display_name":"sysfs","score":0.597599983215332},{"id":"https://openalex.org/keywords/generality","display_name":"Generality","score":0.4417000114917755},{"id":"https://openalex.org/keywords/scheme","display_name":"Scheme (mathematics)","score":0.4004000127315521},{"id":"https://openalex.org/keywords/mandatory-access-control","display_name":"Mandatory access control","score":0.376800000667572},{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.35120001435279846},{"id":"https://openalex.org/keywords/system-call","display_name":"System call","score":0.3490000069141388}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7677000164985657},{"id":"https://openalex.org/C553261973","wikidata":"https://www.wikidata.org/wiki/Q14579","display_name":"Linux kernel","level":2,"score":0.7204999923706055},{"id":"https://openalex.org/C74193536","wikidata":"https://www.wikidata.org/wiki/Q574844","display_name":"Kernel (algebra)","level":2,"score":0.6500999927520752},{"id":"https://openalex.org/C90307666","wikidata":"https://www.wikidata.org/wiki/Q1932562","display_name":"sysfs","level":3,"score":0.597599983215332},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.5149000287055969},{"id":"https://openalex.org/C2780767217","wikidata":"https://www.wikidata.org/wiki/Q5532421","display_name":"Generality","level":2,"score":0.4417000114917755},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.42669999599456787},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.4004000127315521},{"id":"https://openalex.org/C2777407602","wikidata":"https://www.wikidata.org/wiki/Q1888932","display_name":"Mandatory access control","level":4,"score":0.376800000667572},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.35120001435279846},{"id":"https://openalex.org/C2778579508","wikidata":"https://www.wikidata.org/wiki/Q722192","display_name":"System call","level":2,"score":0.3490000069141388},{"id":"https://openalex.org/C160191386","wikidata":"https://www.wikidata.org/wiki/Q868299","display_name":"Control flow","level":2,"score":0.3440000116825104},{"id":"https://openalex.org/C88468194","wikidata":"https://www.wikidata.org/wiki/Q1172416","display_name":"Data-flow analysis","level":3,"score":0.33399999141693115},{"id":"https://openalex.org/C27458966","wikidata":"https://www.wikidata.org/wiki/Q1187693","display_name":"Control flow graph","level":2,"score":0.33180001378059387},{"id":"https://openalex.org/C489000","wikidata":"https://www.wikidata.org/wiki/Q747385","display_name":"Data flow diagram","level":2,"score":0.33149999380111694},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.3314000070095062},{"id":"https://openalex.org/C94127936","wikidata":"https://www.wikidata.org/wiki/Q5160105","display_name":"Configfs","level":3,"score":0.3197000026702881},{"id":"https://openalex.org/C2992317946","wikidata":"https://www.wikidata.org/wiki/Q712144","display_name":"De facto","level":2,"score":0.30160000920295715},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.29919999837875366},{"id":"https://openalex.org/C168065819","wikidata":"https://www.wikidata.org/wiki/Q845566","display_name":"Debugging","level":2,"score":0.2962999939918518},{"id":"https://openalex.org/C112904061","wikidata":"https://www.wikidata.org/wiki/Q1077480","display_name":"Hypervisor","level":4,"score":0.2743000090122223},{"id":"https://openalex.org/C2779089604","wikidata":"https://www.wikidata.org/wiki/Q7169333","display_name":"Permission","level":2,"score":0.2563999891281128},{"id":"https://openalex.org/C33762810","wikidata":"https://www.wikidata.org/wiki/Q461671","display_name":"Data integrity","level":2,"score":0.2554999887943268}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icc52391.2025.11161046","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icc52391.2025.11161046","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICC 2025 - IEEE International Conference on Communications","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":21,"referenced_works":["https://openalex.org/W1477563924","https://openalex.org/W1968002620","https://openalex.org/W1993682390","https://openalex.org/W2059969702","https://openalex.org/W2080313875","https://openalex.org/W2109219878","https://openalex.org/W2159059513","https://openalex.org/W2172131317","https://openalex.org/W2258876169","https://openalex.org/W2295234910","https://openalex.org/W2368550879","https://openalex.org/W2785618324","https://openalex.org/W2891196279","https://openalex.org/W2969354474","https://openalex.org/W2987375469","https://openalex.org/W3156978076","https://openalex.org/W4242192026","https://openalex.org/W4311166013","https://openalex.org/W4387298337","https://openalex.org/W4400121104","https://openalex.org/W4405181102"],"related_works":[],"abstract_inverted_index":{"The":[0,43,56,148],"operating":[1],"system":[2],"kernel":[3,44,142,163],"is":[4,16,45,59,75,114],"the":[5,9,52,63,69,138,161],"security":[6],"foundation":[7],"for":[8,92],"entire":[10],"system.":[11],"Yet":[12],"control":[13],"flow":[14],"hijacking":[15],"a":[17,38,97,127,144],"prevalent":[18],"attack":[19],"method":[20],"that":[21,151],"continually":[22],"threatens":[23],"its":[24,78],"security.":[25],"Control-Flow":[26,40],"Integrity":[27],"(CFI)":[28],"defends":[29],"against":[30],"these":[31],"attacks":[32],"by":[33,107,169],"enforcing":[34],"execution":[35],"compliance":[36],"with":[37,122],"pre-computed":[39],"Graph":[41],"(CFG).":[42],"very":[46],"sensitive":[47],"to":[48,86,118],"performance":[49,174],"overhead,":[50],"challenging":[51],"CFI":[53,79,91,112],"scheme":[54,80],"design.":[55],"existing":[57],"Clang-CFI":[58],"software-based,":[60],"making":[61],"it":[62,74,136],"general":[64],"solution":[65],"widely":[66],"deployed":[67],"as":[68],"de":[70],"facto":[71],"CFI.":[72],"However,":[73],"coarse-grained,":[76],"and":[77,116,134,171],"design":[81,113],"cannot":[82],"be":[83],"easily":[84],"applied":[85],"fine-grained":[87,93,120],"CFGs.":[88],"To":[89],"provide":[90],"CFG,":[94],"we":[95],"propose":[96],"flexible":[98],"protection":[99],"design,":[100],"FLEX-CFI.":[101],"This":[102],"software-based":[103],"approach":[104],"enhances":[105],"generality":[106],"eliminating":[108],"hardware":[109,146],"dependencies.":[110],"Our":[111],"practical":[115],"applicable":[117],"various":[119],"CFGs":[121],"negligible":[123],"overhead.":[124,175],"We":[125],"implemented":[126],"prototype":[128],"of":[129,156],"FLEX-CFI":[130,152],"based":[131],"on":[132,137],"Clang/LLVM":[133],"evaluated":[135],"Android":[139],"ARM64":[140],"Linux":[141],"using":[143],"real-world":[145],"device.":[147],"results":[149],"show":[150],"effectively":[153],"secures":[154],"92%":[155],"all":[157],"indirect":[158],"call-sites":[159],"in":[160],"allyesconfig":[162],"configuration":[164],"while":[165],"reducing":[166],"target":[167],"functions":[168],"93.5%":[170],"imposing":[172],"close-tozero":[173]},"counts_by_year":[],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}