{"id":"https://openalex.org/W2058179457","doi":"https://doi.org/10.1109/sarnof.2015.7324662","title":"Impact of software obfuscation on susceptibility to Return-Oriented Programming attacks","display_name":"Impact of software obfuscation on susceptibility to Return-Oriented Programming attacks","publication_year":2015,"publication_date":"2015-09-01","ids":{"openalex":"https://openalex.org/W2058179457","doi":"https://doi.org/10.1109/sarnof.2015.7324662","mag":"2058179457"},"language":"en","primary_location":{"id":"doi:10.1109/sarnof.2015.7324662","is_oa":false,"landing_page_url":"https://doi.org/10.1109/sarnof.2015.7324662","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2015 36th IEEE Sarnoff Symposium","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5015823753","display_name":"Harshvardhan P. Joshi","orcid":"https://orcid.org/0000-0003-3132-2726"},"institutions":[{"id":"https://openalex.org/I137902535","display_name":"North Carolina State University","ror":"https://ror.org/04tj63d06","country_code":"US","type":"education","lineage":["https://openalex.org/I137902535"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Harshvardhan P. Joshi","raw_affiliation_strings":["Department of Computer Science, North Carolina State University, Raleigh, NC, USA","Department of Computer Science, North Carolina State University, Raleigh, 27695-8206, USA"],"affiliations":[{"raw_affiliation_string":"Department of Computer Science, North Carolina State University, Raleigh, NC, USA","institution_ids":["https://openalex.org/I137902535"]},{"raw_affiliation_string":"Department of Computer Science, North Carolina State University, Raleigh, 27695-8206, USA","institution_ids":["https://openalex.org/I137902535"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5042867890","display_name":"Aravindhan Dhanasekaran","orcid":null},"institutions":[{"id":"https://openalex.org/I137902535","display_name":"North Carolina State University","ror":"https://ror.org/04tj63d06","country_code":"US","type":"education","lineage":["https://openalex.org/I137902535"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Aravindhan Dhanasekaran","raw_affiliation_strings":["Department of Computer Science, North Carolina State University, Raleigh, NC, USA","Department of Computer Science, North Carolina State University, Raleigh, 27695-8206, USA"],"affiliations":[{"raw_affiliation_string":"Department of Computer Science, North Carolina State University, Raleigh, NC, USA","institution_ids":["https://openalex.org/I137902535"]},{"raw_affiliation_string":"Department of Computer Science, North Carolina State University, Raleigh, 27695-8206, USA","institution_ids":["https://openalex.org/I137902535"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5055485742","display_name":"Rudra Dutta","orcid":"https://orcid.org/0000-0002-7840-4182"},"institutions":[{"id":"https://openalex.org/I137902535","display_name":"North Carolina State University","ror":"https://ror.org/04tj63d06","country_code":"US","type":"education","lineage":["https://openalex.org/I137902535"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Rudra Dutta","raw_affiliation_strings":["Department of Computer Science, North Carolina State University, Raleigh, NC, USA","Department of Computer Science, North Carolina State University, Raleigh, 27695-8206, USA"],"affiliations":[{"raw_affiliation_string":"Department of Computer Science, North Carolina State University, Raleigh, NC, USA","institution_ids":["https://openalex.org/I137902535"]},{"raw_affiliation_string":"Department of Computer Science, North Carolina State University, Raleigh, 27695-8206, USA","institution_ids":["https://openalex.org/I137902535"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5015823753"],"corresponding_institution_ids":["https://openalex.org/I137902535"],"apc_list":null,"apc_paid":null,"fwci":1.7864,"has_fulltext":false,"cited_by_count":8,"citation_normalized_percentile":{"value":0.88685573,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"161","last_page":"166"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9837999939918518,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/obfuscation","display_name":"Obfuscation","score":0.9640893340110779},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.8610059022903442},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8119749426841736},{"id":"https://openalex.org/keywords/digital-rights-management","display_name":"Digital rights management","score":0.762968122959137},{"id":"https://openalex.org/keywords/reverse-engineering","display_name":"Reverse engineering","score":0.620940625667572},{"id":"https://openalex.org/keywords/buffer-overflow","display_name":"Buffer overflow","score":0.6135398149490356},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5930309891700745},{"id":"https://openalex.org/keywords/control-flow-graph","display_name":"Control flow graph","score":0.5778571367263794},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.5711385607719421},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.25455185770988464},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.2263379693031311}],"concepts":[{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.9640893340110779},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.8610059022903442},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8119749426841736},{"id":"https://openalex.org/C537843408","wikidata":"https://www.wikidata.org/wiki/Q192532","display_name":"Digital rights management","level":2,"score":0.762968122959137},{"id":"https://openalex.org/C207850805","wikidata":"https://www.wikidata.org/wiki/Q269608","display_name":"Reverse engineering","level":2,"score":0.620940625667572},{"id":"https://openalex.org/C40842320","wikidata":"https://www.wikidata.org/wiki/Q19423","display_name":"Buffer overflow","level":2,"score":0.6135398149490356},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5930309891700745},{"id":"https://openalex.org/C27458966","wikidata":"https://www.wikidata.org/wiki/Q1187693","display_name":"Control flow graph","level":2,"score":0.5778571367263794},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.5711385607719421},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.25455185770988464},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.2263379693031311}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/sarnof.2015.7324662","is_oa":false,"landing_page_url":"https://doi.org/10.1109/sarnof.2015.7324662","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2015 36th IEEE Sarnoff Symposium","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.7900000214576721,"display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":19,"referenced_works":["https://openalex.org/W70478248","https://openalex.org/W1514023947","https://openalex.org/W1545927878","https://openalex.org/W1963947298","https://openalex.org/W1968002620","https://openalex.org/W2009801020","https://openalex.org/W2066784081","https://openalex.org/W2089448621","https://openalex.org/W2098010707","https://openalex.org/W2109219878","https://openalex.org/W2146567535","https://openalex.org/W2153185479","https://openalex.org/W2158389625","https://openalex.org/W2159216827","https://openalex.org/W2162800072","https://openalex.org/W4246166885","https://openalex.org/W6602906054","https://openalex.org/W6676126365","https://openalex.org/W6683671222"],"related_works":["https://openalex.org/W2913519194","https://openalex.org/W2007287520","https://openalex.org/W2132360941","https://openalex.org/W4362634109","https://openalex.org/W4388820743","https://openalex.org/W2793135307","https://openalex.org/W2055981842","https://openalex.org/W2532550198","https://openalex.org/W3134235726","https://openalex.org/W2906395579"],"abstract_inverted_index":{"Software":[0],"obfuscation":[1,67],"is":[2,15,23,97],"a":[3,16,98,132],"commonly":[4,24],"used":[5,25,102],"technique":[6,101],"to":[7,90,103],"protect":[8],"software,":[9],"especially":[10],"against":[11],"reverse-engineering":[12],"attacks.":[13,95],"It":[14],"form":[17],"of":[18,37,44,63,119,128],"security":[19,38],"through":[20],"obscurity":[21],"and":[22,29,57,75,116,138],"for":[26],"intellectual":[27],"property":[28],"Digital":[30],"Rights":[31],"Management":[32],"protection.":[33],"However,":[34],"this":[35,53],"increase":[36,135],"may":[39,83],"come":[40],"at":[41],"the":[42,59,64,71,85,109,126],"expense":[43],"increased":[45],"vulnerabilities":[46],"in":[47,113,131],"another":[48],"direction,":[49],"hitherto":[50],"unsuspected.":[51],"In":[52],"paper,":[54],"we":[55],"propose":[56],"investigate":[58],"hypothesis":[60],"that":[61,125],"some":[62],"most":[65],"popular":[66],"techniques,":[68],"including":[69],"changing":[70],"control":[72],"flow":[73],"graph":[74],"substituting":[76],"simpler":[77],"instruction":[78],"sequences":[79],"with":[80],"complex":[81],"instructions,":[82],"make":[84,142],"obfuscated":[86,115],"binary":[87,133],"more":[88],"vulnerable":[89],"Return-Oriented":[91],"Programming":[92],"(ROP)":[93],"based":[94],"ROP":[96,110,129],"comparatively":[99],"recent":[100],"exploit":[104],"buffer-overflow":[105],"vulnerabilities.":[106],"We":[107,123],"analyze":[108],"gadgets":[111,130],"present":[112],"both":[114],"un-obfuscated":[117],"versions":[118],"well":[120],"known":[121],"binaries.":[122],"show":[124],"number":[127],"significantly":[134],"after":[136],"obfuscation,":[137],"it":[139],"can":[140],"potentially":[141],"ROP-based":[143],"exploits":[144],"easier.":[145]},"counts_by_year":[{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":1},{"year":2020,"cited_by_count":2},{"year":2018,"cited_by_count":2},{"year":2017,"cited_by_count":2}],"updated_date":"2026-03-25T13:04:00.132906","created_date":"2025-10-10T00:00:00"}