{"id":"https://openalex.org/W4395106437","doi":"https://doi.org/10.1145/3620666.3651343","title":"Pythia: Compiler-Guided Defense Against Non-Control Data Attacks","display_name":"Pythia: Compiler-Guided Defense Against Non-Control Data Attacks","publication_year":2024,"publication_date":"2024-04-24","ids":{"openalex":"https://openalex.org/W4395106437","doi":"https://doi.org/10.1145/3620666.3651343"},"language":"en","primary_location":{"id":"doi:10.1145/3620666.3651343","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3620666.3651343","pdf_url":null,"source":null,"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 29th ACM International Conference on Architectural Support for Programming Languages and Operating Systems, Volume 3","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3620666.3651343","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5009383888","display_name":"Sharjeel Khan","orcid":"https://orcid.org/0000-0002-4563-4619"},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sharjeel Khan","raw_affiliation_strings":["School of Computer Science, Georgia Institute of Technology, Atlanta, Georgia, United States of America"],"raw_orcid":"https://orcid.org/0000-0002-4563-4619","affiliations":[{"raw_affiliation_string":"School of Computer Science, Georgia Institute of Technology, Atlanta, Georgia, United States of America","institution_ids":["https://openalex.org/I130701444"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5080183088","display_name":"Bodhisatwa Chatterjee","orcid":"https://orcid.org/0000-0003-3098-6256"},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Bodhisatwa Chatterjee","raw_affiliation_strings":["School of Computer Science, Georgia Institute of Technology, Atlanta, Georgia, United States of America"],"raw_orcid":"https://orcid.org/0000-0003-3098-6256","affiliations":[{"raw_affiliation_string":"School of Computer Science, Georgia Institute of Technology, Atlanta, Georgia, United States of America","institution_ids":["https://openalex.org/I130701444"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5061235810","display_name":"Santosh Pande","orcid":"https://orcid.org/0000-0001-6723-8062"},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Santosh Pande","raw_affiliation_strings":["School of Computer Science, Georgia Institute of Technology, Atlanta, Georgia, United States of America"],"raw_orcid":"https://orcid.org/0000-0001-6723-8062","affiliations":[{"raw_affiliation_string":"School of Computer Science, Georgia Institute of Technology, Atlanta, Georgia, United States of America","institution_ids":["https://openalex.org/I130701444"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I130701444"],"apc_list":null,"apc_paid":null,"fwci":0.7112,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.6675673,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":95,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"850","last_page":"866"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.993399977684021,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10478","display_name":"Diamond and Carbon-based Materials Research","score":0.9781000018119812,"subfield":{"id":"https://openalex.org/subfields/2505","display_name":"Materials Chemistry"},"field":{"id":"https://openalex.org/fields/25","display_name":"Materials Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.7714138031005859},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7551742792129517},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.7014604806900024},{"id":"https://openalex.org/keywords/control-flow","display_name":"Control flow","score":0.690612256526947},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.6737725734710693},{"id":"https://openalex.org/keywords/compiler","display_name":"Compiler","score":0.6178925633430481},{"id":"https://openalex.org/keywords/privilege","display_name":"Privilege (computing)","score":0.5347180962562561},{"id":"https://openalex.org/keywords/state","display_name":"State (computer science)","score":0.521826446056366},{"id":"https://openalex.org/keywords/software-security-assurance","display_name":"Software security assurance","score":0.49820566177368164},{"id":"https://openalex.org/keywords/data-flow-diagram","display_name":"Data flow diagram","score":0.48711109161376953},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.47665148973464966},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.2658940851688385},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.21511587500572205},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.15821892023086548},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.12490296363830566},{"id":"https://openalex.org/keywords/security-service","display_name":"Security service","score":0.10745397210121155}],"concepts":[{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.7714138031005859},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7551742792129517},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.7014604806900024},{"id":"https://openalex.org/C160191386","wikidata":"https://www.wikidata.org/wiki/Q868299","display_name":"Control flow","level":2,"score":0.690612256526947},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.6737725734710693},{"id":"https://openalex.org/C169590947","wikidata":"https://www.wikidata.org/wiki/Q47506","display_name":"Compiler","level":2,"score":0.6178925633430481},{"id":"https://openalex.org/C2780138299","wikidata":"https://www.wikidata.org/wiki/Q3404265","display_name":"Privilege (computing)","level":2,"score":0.5347180962562561},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.521826446056366},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.49820566177368164},{"id":"https://openalex.org/C489000","wikidata":"https://www.wikidata.org/wiki/Q747385","display_name":"Data flow diagram","level":2,"score":0.48711109161376953},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.47665148973464966},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.2658940851688385},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.21511587500572205},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.15821892023086548},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.12490296363830566},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.10745397210121155},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3620666.3651343","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3620666.3651343","pdf_url":null,"source":null,"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 29th ACM International Conference on Architectural Support for Programming Languages and Operating Systems, Volume 3","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3620666.3651343","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3620666.3651343","pdf_url":null,"source":null,"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 29th ACM International Conference on Architectural Support for Programming Languages and Operating Systems, Volume 3","raw_type":"proceedings-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.8100000023841858}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":84,"referenced_works":["https://openalex.org/W2363194","https://openalex.org/W23405769","https://openalex.org/W127238549","https://openalex.org/W1429241971","https://openalex.org/W1477563924","https://openalex.org/W1520941164","https://openalex.org/W1536898727","https://openalex.org/W1575709006","https://openalex.org/W1591370639","https://openalex.org/W1631846088","https://openalex.org/W1878544538","https://openalex.org/W1904738922","https://openalex.org/W1922844761","https://openalex.org/W1964132576","https://openalex.org/W1969519208","https://openalex.org/W1993682390","https://openalex.org/W1993736952","https://openalex.org/W1994759706","https://openalex.org/W1997394198","https://openalex.org/W2001978806","https://openalex.org/W2015083179","https://openalex.org/W2034077833","https://openalex.org/W2059969702","https://openalex.org/W2081105932","https://openalex.org/W2081768685","https://openalex.org/W2094619820","https://openalex.org/W2098806455","https://openalex.org/W2111927651","https://openalex.org/W2116730531","https://openalex.org/W2117798902","https://openalex.org/W2122757982","https://openalex.org/W2128171167","https://openalex.org/W2138517425","https://openalex.org/W2140557450","https://openalex.org/W2154795299","https://openalex.org/W2155851497","https://openalex.org/W2168264487","https://openalex.org/W2171929398","https://openalex.org/W2180474751","https://openalex.org/W2301356482","https://openalex.org/W2301548261","https://openalex.org/W2307404423","https://openalex.org/W2318148966","https://openalex.org/W2406033776","https://openalex.org/W2512784977","https://openalex.org/W2517176850","https://openalex.org/W2607063282","https://openalex.org/W2752985907","https://openalex.org/W2796645376","https://openalex.org/W2883468219","https://openalex.org/W2889195442","https://openalex.org/W2889771064","https://openalex.org/W2891196279","https://openalex.org/W2891457144","https://openalex.org/W2901854230","https://openalex.org/W2914040074","https://openalex.org/W2945713124","https://openalex.org/W2965967214","https://openalex.org/W2969354474","https://openalex.org/W3011562144","https://openalex.org/W3015016659","https://openalex.org/W3033425067","https://openalex.org/W3041862889","https://openalex.org/W3043044582","https://openalex.org/W3101333446","https://openalex.org/W3106633543","https://openalex.org/W3133542048","https://openalex.org/W3137996272","https://openalex.org/W3138733102","https://openalex.org/W3157213858","https://openalex.org/W3198309584","https://openalex.org/W4206568649","https://openalex.org/W4232975446","https://openalex.org/W4253180115","https://openalex.org/W4299301436","https://openalex.org/W4308391524","https://openalex.org/W4387667097","https://openalex.org/W6600040955","https://openalex.org/W6611405367","https://openalex.org/W6628302897","https://openalex.org/W6638559843","https://openalex.org/W6638583435","https://openalex.org/W6682091879","https://openalex.org/W6967186158"],"related_works":["https://openalex.org/W2095925360","https://openalex.org/W1549956274","https://openalex.org/W4246377515","https://openalex.org/W2052160877","https://openalex.org/W2040778456","https://openalex.org/W2148473336","https://openalex.org/W2119238100","https://openalex.org/W4254236578","https://openalex.org/W2144344516","https://openalex.org/W1754116331"],"abstract_inverted_index":{"Modern":[0],"C/C++":[1],"applications":[2],"are":[3,77],"susceptible":[4],"to":[5,13,46,59],"Non-Control":[6],"Data":[7],"Attacks,":[8],"where":[9,39],"an":[10],"adversary":[11],"attempts":[12],"exploit":[14],"memory":[15],"corruption":[16],"vulnerabilities":[17],"for":[18],"security":[19],"breaches":[20],"such":[21,29,72],"as":[22,73],"privilege":[23],"escalation,":[24],"control-flow":[25,80],"manipulation,":[26],"etc.":[27],"One":[28],"popular":[30],"class":[31],"of":[32,87],"non-control":[33],"data":[34,45],"attacks":[35,82],"is":[36],"Control-flow":[37,74],"Bending,":[38],"the":[40,43,52],"attacker":[41],"manipulates":[42],"program":[44,53],"flip":[47],"branch":[48,88],"outcomes,":[49],"and":[50],"divert":[51],"control":[54],"flow":[55],"into":[56],"alternative":[57],"paths":[58],"gain":[60],"privileges.":[61],"Unfortunately,":[62],"despite":[63],"tremendous":[64],"advancements":[65],"in":[66],"software":[67],"security,":[68],"state-of-art":[69],"defense":[70],"mechanisms":[71],"Integrity":[75],"(CFI),":[76],"ineffective":[78],"against":[79],"bending":[81],"especially":[83],"those":[84],"involving":[85],"flipping":[86],"predicates.":[89]},"counts_by_year":[{"year":2025,"cited_by_count":2}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}