{"id":"https://openalex.org/W2512784977","doi":"https://doi.org/10.1109/sp.2016.62","title":"Data-Oriented Programming: On the Expressiveness of Non-control Data Attacks","display_name":"Data-Oriented Programming: On the Expressiveness of Non-control Data Attacks","publication_year":2016,"publication_date":"2016-05-01","ids":{"openalex":"https://openalex.org/W2512784977","doi":"https://doi.org/10.1109/sp.2016.62","mag":"2512784977"},"language":"en","primary_location":{"id":"doi:10.1109/sp.2016.62","is_oa":false,"landing_page_url":"https://doi.org/10.1109/sp.2016.62","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2016 IEEE Symposium on Security and Privacy (SP)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5102150414","display_name":"Hong Hu","orcid":"https://orcid.org/0000-0002-6261-3190"},"institutions":[{"id":"https://openalex.org/I165932596","display_name":"National University of Singapore","ror":"https://ror.org/01tgyzw49","country_code":"SG","type":"education","lineage":["https://openalex.org/I165932596"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Hong Hu","raw_affiliation_strings":["Dept. of Comput. Sci., Nat. Univ. of Singapore, Singapore, Singapore","Department of Computer Science, National University of Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Dept. of Comput. Sci., Nat. Univ. of Singapore, Singapore, Singapore","institution_ids":["https://openalex.org/I165932596"]},{"raw_affiliation_string":"Department of Computer Science, National University of Singapore","institution_ids":["https://openalex.org/I165932596"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5072251298","display_name":"Shweta Shinde","orcid":"https://orcid.org/0000-0003-0415-2960"},"institutions":[{"id":"https://openalex.org/I165932596","display_name":"National University of Singapore","ror":"https://ror.org/01tgyzw49","country_code":"SG","type":"education","lineage":["https://openalex.org/I165932596"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Shweta Shinde","raw_affiliation_strings":["Dept. of Comput. Sci., Nat. Univ. of Singapore, Singapore, Singapore","Department of Computer Science, National University of Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Dept. of Comput. Sci., Nat. Univ. of Singapore, Singapore, Singapore","institution_ids":["https://openalex.org/I165932596"]},{"raw_affiliation_string":"Department of Computer Science, National University of Singapore","institution_ids":["https://openalex.org/I165932596"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5055799468","display_name":"Sendroiu Adrian","orcid":null},"institutions":[{"id":"https://openalex.org/I165932596","display_name":"National University of Singapore","ror":"https://ror.org/01tgyzw49","country_code":"SG","type":"education","lineage":["https://openalex.org/I165932596"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Sendroiu Adrian","raw_affiliation_strings":["Dept. of Comput. Sci., Nat. Univ. of Singapore, Singapore, Singapore","Department of Computer Science, National University of Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Dept. of Comput. Sci., Nat. Univ. of Singapore, Singapore, Singapore","institution_ids":["https://openalex.org/I165932596"]},{"raw_affiliation_string":"Department of Computer Science, National University of Singapore","institution_ids":["https://openalex.org/I165932596"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5112422404","display_name":"Zheng Leong Chua","orcid":null},"institutions":[{"id":"https://openalex.org/I165932596","display_name":"National University of Singapore","ror":"https://ror.org/01tgyzw49","country_code":"SG","type":"education","lineage":["https://openalex.org/I165932596"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Zheng Leong Chua","raw_affiliation_strings":["Dept. of Comput. Sci., Nat. Univ. of Singapore, Singapore, Singapore","Department of Computer Science, National University of Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Dept. of Comput. Sci., Nat. Univ. of Singapore, Singapore, Singapore","institution_ids":["https://openalex.org/I165932596"]},{"raw_affiliation_string":"Department of Computer Science, National University of Singapore","institution_ids":["https://openalex.org/I165932596"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5034054081","display_name":"Prateek Saxena","orcid":"https://orcid.org/0000-0002-1875-8675"},"institutions":[{"id":"https://openalex.org/I165932596","display_name":"National University of Singapore","ror":"https://ror.org/01tgyzw49","country_code":"SG","type":"education","lineage":["https://openalex.org/I165932596"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Prateek Saxena","raw_affiliation_strings":["Dept. of Comput. Sci., Nat. Univ. of Singapore, Singapore, Singapore","Department of Computer Science, National University of Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Dept. of Comput. Sci., Nat. Univ. of Singapore, Singapore, Singapore","institution_ids":["https://openalex.org/I165932596"]},{"raw_affiliation_string":"Department of Computer Science, National University of Singapore","institution_ids":["https://openalex.org/I165932596"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5084611756","display_name":"Zhenkai Liang","orcid":"https://orcid.org/0000-0001-7138-5030"},"institutions":[{"id":"https://openalex.org/I165932596","display_name":"National University of Singapore","ror":"https://ror.org/01tgyzw49","country_code":"SG","type":"education","lineage":["https://openalex.org/I165932596"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Zhenkai Liang","raw_affiliation_strings":["Dept. of Comput. Sci., Nat. Univ. of Singapore, Singapore, Singapore","Department of Computer Science, National University of Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Dept. of Comput. Sci., Nat. Univ. of Singapore, Singapore, Singapore","institution_ids":["https://openalex.org/I165932596"]},{"raw_affiliation_string":"Department of Computer Science, National University of Singapore","institution_ids":["https://openalex.org/I165932596"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I165932596"],"apc_list":null,"apc_paid":null,"fwci":25.4526,"has_fulltext":false,"cited_by_count":365,"citation_normalized_percentile":{"value":0.9965211,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":99,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"969","last_page":"986"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.998199999332428,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9926999807357788,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.8597673773765564},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.834192156791687},{"id":"https://openalex.org/keywords/gadget","display_name":"Gadget","score":0.8065178394317627},{"id":"https://openalex.org/keywords/x86","display_name":"x86","score":0.7898114919662476},{"id":"https://openalex.org/keywords/control-flow","display_name":"Control flow","score":0.5609130263328552},{"id":"https://openalex.org/keywords/construct","display_name":"Construct (python library)","score":0.55988609790802},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.41772282123565674},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.3416091203689575},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.08686181902885437}],"concepts":[{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.8597673773765564},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.834192156791687},{"id":"https://openalex.org/C119770614","wikidata":"https://www.wikidata.org/wiki/Q5516347","display_name":"Gadget","level":2,"score":0.8065178394317627},{"id":"https://openalex.org/C170723468","wikidata":"https://www.wikidata.org/wiki/Q182933","display_name":"x86","level":3,"score":0.7898114919662476},{"id":"https://openalex.org/C160191386","wikidata":"https://www.wikidata.org/wiki/Q868299","display_name":"Control flow","level":2,"score":0.5609130263328552},{"id":"https://openalex.org/C2780801425","wikidata":"https://www.wikidata.org/wiki/Q5164392","display_name":"Construct (python library)","level":2,"score":0.55988609790802},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.41772282123565674},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.3416091203689575},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.08686181902885437},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/sp.2016.62","is_oa":false,"landing_page_url":"https://doi.org/10.1109/sp.2016.62","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2016 IEEE Symposium on Security and Privacy (SP)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.6600000262260437}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":57,"referenced_works":["https://openalex.org/W1112477","https://openalex.org/W53119127","https://openalex.org/W1416363498","https://openalex.org/W1429241971","https://openalex.org/W1459231281","https://openalex.org/W1538332098","https://openalex.org/W1557018311","https://openalex.org/W1575709006","https://openalex.org/W1605557845","https://openalex.org/W1816718056","https://openalex.org/W1823377586","https://openalex.org/W1825457006","https://openalex.org/W1826158585","https://openalex.org/W1963947298","https://openalex.org/W1969501726","https://openalex.org/W1993682390","https://openalex.org/W1993736952","https://openalex.org/W1996931407","https://openalex.org/W2015083179","https://openalex.org/W2022018347","https://openalex.org/W2035991175","https://openalex.org/W2042856445","https://openalex.org/W2072102701","https://openalex.org/W2079029390","https://openalex.org/W2080313875","https://openalex.org/W2081768685","https://openalex.org/W2109219878","https://openalex.org/W2117798902","https://openalex.org/W2122757982","https://openalex.org/W2124360577","https://openalex.org/W2138517425","https://openalex.org/W2140611647","https://openalex.org/W2155851497","https://openalex.org/W2158237156","https://openalex.org/W2162800072","https://openalex.org/W2293825325","https://openalex.org/W2295441334","https://openalex.org/W2575425722","https://openalex.org/W2914213117","https://openalex.org/W3023860284","https://openalex.org/W4243885711","https://openalex.org/W6600040955","https://openalex.org/W6602098182","https://openalex.org/W6628118404","https://openalex.org/W6628302897","https://openalex.org/W6628351959","https://openalex.org/W6632086762","https://openalex.org/W6638472749","https://openalex.org/W6638487575","https://openalex.org/W6638559843","https://openalex.org/W6638583435","https://openalex.org/W6671147960","https://openalex.org/W6676126365","https://openalex.org/W6678545021","https://openalex.org/W6680659772","https://openalex.org/W6683258919","https://openalex.org/W6758854210"],"related_works":["https://openalex.org/W2170992734","https://openalex.org/W23208396","https://openalex.org/W2512784977","https://openalex.org/W2022292029","https://openalex.org/W4229928981","https://openalex.org/W2117798902","https://openalex.org/W203252516","https://openalex.org/W2298968419","https://openalex.org/W2519171629","https://openalex.org/W4297890097"],"abstract_inverted_index":{"As":[0],"control-flow":[1,37],"hijacking":[2,38],"defenses":[3,147],"gain":[4],"adoption,":[5],"it":[6],"is":[7,52],"important":[8],"to":[9,24,36,80,122,132,135,144,151,163],"understand":[10],"the":[11,48,53,91,109,160,165,169,173,181,188],"remaining":[12],"capabilities":[13],"of":[14,57,116,128,175],"adversaries":[15],"via":[16],"memory":[17,166],"exploits.":[18],"Non-control":[19],"data":[20,42,59,84],"exploits":[21,43,85],"are":[22,69,108,130],"used":[23],"mount":[25],"information":[26],"leakage":[27],"attacks":[28,32,68,143,170],"or":[29],"privilege":[30],"escalation":[31],"program":[33],"memory.":[34],"Compared":[35],"attacks,":[39],"such":[40,67],"non-control":[41,58,83],"have":[44,120],"limited":[45],"expressiveness,":[46],"however,":[47],"question":[49],"is:":[50],"what":[51],"real":[54],"expressive":[55,82],"power":[56],"attacks?":[60],"In":[61,90],"this":[62],"paper":[63],"we":[64,97],"show":[65],"that":[66],"Turing-complete.":[70],"We":[71,139],"present":[72],"a":[73,153],"systematic":[74],"technique":[75],"called":[76],"data-oriented":[77,100],"programming":[78],"(DOP)":[79],"construct":[81],"for":[86,112],"arbitrary":[87,124],"x86":[88,101],"programs.":[89],"experimental":[92],"evaluation":[93],"using":[94],"9":[95,117],"programs,":[96],"identified":[98],"7518":[99],"gadgets":[102,121],"and":[103,126,162,177],"5052":[104],"gadget":[105],"dispatchers,":[106],"which":[107,156],"building":[110],"blocks":[111],"DOP.":[113],"8":[114],"out":[115],"real-world":[118],"programs":[119],"simulate":[123],"computations":[125],"2":[127],"them":[129],"confirmed":[131],"be":[133],"able":[134],"build":[136,140],"Turing-complete":[137],"attacks.":[138],"3":[141],"end-to-end":[142],"bypass":[145],"randomization":[146],"without":[148],"leaking":[149],"addresses,":[150],"run":[152],"network":[154],"bot":[155],"takes":[157],"commands":[158],"from":[159],"attacker,":[161],"alter":[164],"permissions.":[167],"All":[168],"work":[171],"in":[172],"presence":[174],"ASLR":[176],"DEP,":[178],"demonstrating":[179],"how":[180],"expressiveness":[182],"offered":[183],"by":[184],"DOP":[185],"significantly":[186],"empowers":[187],"attacker.":[189]},"counts_by_year":[{"year":2026,"cited_by_count":8},{"year":2025,"cited_by_count":29},{"year":2024,"cited_by_count":27},{"year":2023,"cited_by_count":32},{"year":2022,"cited_by_count":35},{"year":2021,"cited_by_count":56},{"year":2020,"cited_by_count":47},{"year":2019,"cited_by_count":55},{"year":2018,"cited_by_count":39},{"year":2017,"cited_by_count":27},{"year":2016,"cited_by_count":10}],"updated_date":"2026-08-11T07:18:39.950985","created_date":"2025-10-10T00:00:00"}