{"id":"https://openalex.org/W2599530178","doi":"https://doi.org/10.1145/3052973.3052976","title":"Strict Virtual Call Integrity Checking for C++ Binaries","display_name":"Strict Virtual Call Integrity Checking for C++ Binaries","publication_year":2017,"publication_date":"2017-03-31","ids":{"openalex":"https://openalex.org/W2599530178","doi":"https://doi.org/10.1145/3052973.3052976","mag":"2599530178"},"language":"en","primary_location":{"id":"doi:10.1145/3052973.3052976","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3052973.3052976","pdf_url":"http://dl.acm.org/ft_gateway.cfm?id=3052976&type=pdf","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2017 ACM on Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"http://dl.acm.org/ft_gateway.cfm?id=3052976&type=pdf","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5029805433","display_name":"Mohamed Elsabagh","orcid":"https://orcid.org/0000-0002-5320-4985"},"institutions":[{"id":"https://openalex.org/I162714631","display_name":"George Mason University","ror":"https://ror.org/02jqj7156","country_code":"US","type":"education","lineage":["https://openalex.org/I162714631"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Mohamed Elsabagh","raw_affiliation_strings":["George Mason University, Fairfax, VA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"George Mason University, Fairfax, VA, USA","institution_ids":["https://openalex.org/I162714631"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5003091242","display_name":"Dan Fleck","orcid":null},"institutions":[{"id":"https://openalex.org/I162714631","display_name":"George Mason University","ror":"https://ror.org/02jqj7156","country_code":"US","type":"education","lineage":["https://openalex.org/I162714631"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Dan Fleck","raw_affiliation_strings":["George Mason University, Fairfax, VA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"George Mason University, Fairfax, VA, USA","institution_ids":["https://openalex.org/I162714631"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5041500780","display_name":"Angelos Stavrou","orcid":"https://orcid.org/0000-0001-9888-0592"},"institutions":[{"id":"https://openalex.org/I162714631","display_name":"George Mason University","ror":"https://ror.org/02jqj7156","country_code":"US","type":"education","lineage":["https://openalex.org/I162714631"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Angelos Stavrou","raw_affiliation_strings":["George Mason University, Fairfax, VA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"George Mason University, Fairfax, VA, USA","institution_ids":["https://openalex.org/I162714631"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I162714631"],"apc_list":null,"apc_paid":null,"fwci":2.0776,"has_fulltext":true,"cited_by_count":27,"citation_normalized_percentile":{"value":0.90815314,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"140","last_page":"154"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9970999956130981,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10478","display_name":"Diamond and Carbon-based Materials Research","score":0.9858999848365784,"subfield":{"id":"https://openalex.org/subfields/2505","display_name":"Materials Chemistry"},"field":{"id":"https://openalex.org/fields/25","display_name":"Materials Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/spec#","display_name":"Spec#","score":0.7912185192108154},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7759684324264526},{"id":"https://openalex.org/keywords/attack-surface","display_name":"Attack surface","score":0.684132993221283},{"id":"https://openalex.org/keywords/compiler","display_name":"Compiler","score":0.5903027653694153},{"id":"https://openalex.org/keywords/binary-number","display_name":"Binary number","score":0.5441400408744812},{"id":"https://openalex.org/keywords/reuse","display_name":"Reuse","score":0.4645056426525116},{"id":"https://openalex.org/keywords/memory-protection","display_name":"Memory protection","score":0.4353674054145813},{"id":"https://openalex.org/keywords/virtual-memory","display_name":"Virtual memory","score":0.43252331018447876},{"id":"https://openalex.org/keywords/binary-code","display_name":"Binary code","score":0.4299367368221283},{"id":"https://openalex.org/keywords/state","display_name":"State (computer science)","score":0.412663996219635},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.39685797691345215},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.3801915645599365},{"id":"https://openalex.org/keywords/overlay","display_name":"Overlay","score":0.19183960556983948},{"id":"https://openalex.org/keywords/memory-management","display_name":"Memory management","score":0.16243362426757812},{"id":"https://openalex.org/keywords/arithmetic","display_name":"Arithmetic","score":0.11902350187301636}],"concepts":[{"id":"https://openalex.org/C2778565505","wikidata":"https://www.wikidata.org/wiki/Q2207566","display_name":"Spec#","level":2,"score":0.7912185192108154},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7759684324264526},{"id":"https://openalex.org/C2776576444","wikidata":"https://www.wikidata.org/wiki/Q303569","display_name":"Attack surface","level":2,"score":0.684132993221283},{"id":"https://openalex.org/C169590947","wikidata":"https://www.wikidata.org/wiki/Q47506","display_name":"Compiler","level":2,"score":0.5903027653694153},{"id":"https://openalex.org/C48372109","wikidata":"https://www.wikidata.org/wiki/Q3913","display_name":"Binary number","level":2,"score":0.5441400408744812},{"id":"https://openalex.org/C206588197","wikidata":"https://www.wikidata.org/wiki/Q846574","display_name":"Reuse","level":2,"score":0.4645056426525116},{"id":"https://openalex.org/C18131444","wikidata":"https://www.wikidata.org/wiki/Q163585","display_name":"Memory protection","level":5,"score":0.4353674054145813},{"id":"https://openalex.org/C76399640","wikidata":"https://www.wikidata.org/wiki/Q189401","display_name":"Virtual memory","level":4,"score":0.43252331018447876},{"id":"https://openalex.org/C63435697","wikidata":"https://www.wikidata.org/wiki/Q864135","display_name":"Binary code","level":3,"score":0.4299367368221283},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.412663996219635},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.39685797691345215},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.3801915645599365},{"id":"https://openalex.org/C136085584","wikidata":"https://www.wikidata.org/wiki/Q910289","display_name":"Overlay","level":2,"score":0.19183960556983948},{"id":"https://openalex.org/C176649486","wikidata":"https://www.wikidata.org/wiki/Q2308807","display_name":"Memory management","level":3,"score":0.16243362426757812},{"id":"https://openalex.org/C94375191","wikidata":"https://www.wikidata.org/wiki/Q11205","display_name":"Arithmetic","level":1,"score":0.11902350187301636},{"id":"https://openalex.org/C18903297","wikidata":"https://www.wikidata.org/wiki/Q7150","display_name":"Ecology","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3052973.3052976","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3052973.3052976","pdf_url":"http://dl.acm.org/ft_gateway.cfm?id=3052976&type=pdf","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2017 ACM on Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3052973.3052976","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3052973.3052976","pdf_url":"http://dl.acm.org/ft_gateway.cfm?id=3052976&type=pdf","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2017 ACM on Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"},"sustainable_development_goals":[{"score":0.7599999904632568,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[{"id":"https://openalex.org/G3386313366","display_name":"TOWARDS MEASURING SECURITY FOR IOT","funder_award_id":"60NANB16D285","funder_id":"https://openalex.org/F4320332178","funder_display_name":"National Institute of Standards and Technology"},{"id":"https://openalex.org/G4999837227","display_name":"TWC: TTP Option: Small: Collaborative: Scalable Techniques for Better Situational Awareness: Algorithmic Frameworks and Large-Scale Empirical Analyses","funder_award_id":"1421747","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320332178","display_name":"National Institute of Standards and Technology","ror":"https://ror.org/05xpvk416"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2599530178.pdf","grobid_xml":"https://content.openalex.org/works/W2599530178.grobid-xml"},"referenced_works_count":44,"referenced_works":["https://openalex.org/W1429241971","https://openalex.org/W1509600745","https://openalex.org/W1538332098","https://openalex.org/W1605557845","https://openalex.org/W1613453545","https://openalex.org/W1631846088","https://openalex.org/W1816718056","https://openalex.org/W1823377586","https://openalex.org/W1964999724","https://openalex.org/W1993682390","https://openalex.org/W1997394198","https://openalex.org/W1998988707","https://openalex.org/W2006790656","https://openalex.org/W2022292029","https://openalex.org/W2022413220","https://openalex.org/W2030906223","https://openalex.org/W2033029512","https://openalex.org/W2059278087","https://openalex.org/W2086839628","https://openalex.org/W2109219878","https://openalex.org/W2111760587","https://openalex.org/W2122757982","https://openalex.org/W2136938453","https://openalex.org/W2138517425","https://openalex.org/W2144981449","https://openalex.org/W2145913834","https://openalex.org/W2155810272","https://openalex.org/W2156858199","https://openalex.org/W2159216827","https://openalex.org/W2166571196","https://openalex.org/W2171143790","https://openalex.org/W2296346842","https://openalex.org/W2401156470","https://openalex.org/W2404006520","https://openalex.org/W2482623449","https://openalex.org/W2504609973","https://openalex.org/W2516933175","https://openalex.org/W2560817611","https://openalex.org/W2578771209","https://openalex.org/W2579099470","https://openalex.org/W2906199190","https://openalex.org/W4250981365","https://openalex.org/W6638559843","https://openalex.org/W6684640794"],"related_works":["https://openalex.org/W2052673929","https://openalex.org/W1584308544","https://openalex.org/W4244773577","https://openalex.org/W2055367414","https://openalex.org/W2484072889","https://openalex.org/W2351705013","https://openalex.org/W2120751283","https://openalex.org/W141798819","https://openalex.org/W2373327185","https://openalex.org/W2185135095"],"abstract_inverted_index":{"Modern":[0],"operating":[1],"systems":[2],"are":[3,64],"equipped":[4],"with":[5,121],"defenses":[6,19],"that":[7,23,83,148],"render":[8],"legacy":[9],"code":[10,26],"injection":[11],"attacks":[12,22,38,227],"inoperable.":[13],"However,":[14],"attackers":[15],"can":[16],"bypass":[17],"these":[18],"by":[20,66,113,131],"crafting":[21],"reuse":[24,226],"existing":[25],"in":[27,55,175,187],"a":[28,79,109,199],"program's":[29],"memory.":[30],"One":[31],"of":[32,37,60,124],"the":[33,105,135,160,164,188,193,208],"most":[34,176],"common":[35],"classes":[36],"manipulates":[39],"memory":[40],"data":[41],"used":[42,65],"indirectly":[43],"to":[44,70,183,192,207],"execute":[45],"code,":[46],"such":[47,228],"as":[48,229],"function":[49,61,118],"pointers.":[50],"This":[51],"is":[52,129,150,205],"especially":[53],"prevalent":[54],"C++":[56,85,102],"programs,":[57],"since":[58],"tables":[59],"pointers":[62],"(vtables)":[63],"all":[67],"major":[68],"compilers":[69],"support":[71],"polymorphism.":[72],"In":[73,210],"this":[74],"paper,":[75],"we":[76,212],"propose":[77],"VCI,":[78],"binary":[80,95,136,156,195],"rewriting":[81],"system":[82],"secures":[84],"binaries":[86],"against":[87,159,217],"vtable":[88,225],"attacks.":[89],"VCI":[90,149,169,197,215],"works":[91],"directly":[92],"on":[93,142],"stripped":[94],"files.":[96],"It":[97],"identifies":[98],"and":[99,107,115,145,220],"reconstructs":[100],"various":[101],"semantics":[103],"from":[104,163],"binary,":[106],"constructs":[108],"strict":[110],"CFI":[111],"policy":[112,128],"resolving":[114],"pairing":[116],"virtual":[117],"calls":[119],"(vcalls)":[120],"precise":[122,153],"sets":[123],"target":[125],"classes.":[126],"The":[127],"enforced":[130],"instrumenting":[132],"checks":[133],"into":[134],"at":[137,180],"vcall":[138],"sites.":[139],"Experimental":[140],"results":[141],"SPEC":[143],"CPU2006":[144],"Firefox":[146],"show":[147],"significantly":[151],"more":[152],"than":[154,172],"state-of-the-art":[155,194],"solutions.":[157],"Testing":[158],"ground":[161],"truth":[162],"source-based":[165],"defense":[166],"GCC":[167],"VTV,":[168],"achieved":[170],"greater":[171],"60%":[173],"precision":[174],"cases,":[177],"accounting":[178],"for":[179],"least":[181],"48%":[182],"99%":[184],"additional":[185],"reduction":[186],"attack":[189],"surface":[190],"compared":[191],"defenses.":[196],"incurs":[198],"7.79%":[200],"average":[201],"runtime":[202],"overhead":[203],"which":[204],"comparable":[206],"state-of-the-art.":[209],"addition,":[211],"discuss":[213],"how":[214,221],"defends":[216],"real-world":[218],"attacks,":[219],"it":[222],"impacts":[223],"advanced":[224],"COOP.":[230]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":5},{"year":2020,"cited_by_count":3},{"year":2019,"cited_by_count":6},{"year":2018,"cited_by_count":5},{"year":2017,"cited_by_count":1}],"updated_date":"2026-08-06T08:24:18.245995","created_date":"2025-10-10T00:00:00"}