{"id":"https://openalex.org/W2099382052","doi":"https://doi.org/10.1145/1455770.1455776","title":"When good instructions go bad","display_name":"When good instructions go bad","publication_year":2008,"publication_date":"2008-10-27","ids":{"openalex":"https://openalex.org/W2099382052","doi":"https://doi.org/10.1145/1455770.1455776","mag":"2099382052"},"language":"en","primary_location":{"id":"doi:10.1145/1455770.1455776","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1455770.1455776","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 15th ACM conference on Computer and communications security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5027233139","display_name":"Erik Buchanan","orcid":null},"institutions":[{"id":"https://openalex.org/I36258959","display_name":"University of California San Diego","ror":"https://ror.org/0168r3w48","country_code":"US","type":"education","lineage":["https://openalex.org/I36258959"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Erik Buchanan","raw_affiliation_strings":["University of California, San Diego, La Jolla, CA, USA","University of California - San Diego, La Jolla, CA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of California, San Diego, La Jolla, CA, USA","institution_ids":["https://openalex.org/I36258959"]},{"raw_affiliation_string":"University of California - San Diego, La Jolla, CA, USA","institution_ids":["https://openalex.org/I36258959"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5013754344","display_name":"Ryan Roemer","orcid":null},"institutions":[{"id":"https://openalex.org/I36258959","display_name":"University of California San Diego","ror":"https://ror.org/0168r3w48","country_code":"US","type":"education","lineage":["https://openalex.org/I36258959"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ryan Roemer","raw_affiliation_strings":["University of California, San Diego, La Jolla, CA, USA","University of California - San Diego, La Jolla, CA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of California, San Diego, La Jolla, CA, USA","institution_ids":["https://openalex.org/I36258959"]},{"raw_affiliation_string":"University of California - San Diego, La Jolla, CA, USA","institution_ids":["https://openalex.org/I36258959"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5006975767","display_name":"Hovav Shacham","orcid":"https://orcid.org/0009-0008-0225-8714"},"institutions":[{"id":"https://openalex.org/I36258959","display_name":"University of California San Diego","ror":"https://ror.org/0168r3w48","country_code":"US","type":"education","lineage":["https://openalex.org/I36258959"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Hovav Shacham","raw_affiliation_strings":["University of California, San Diego, La Jolla, CA, USA","University of California - San Diego, La Jolla, CA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of California, San Diego, La Jolla, CA, USA","institution_ids":["https://openalex.org/I36258959"]},{"raw_affiliation_string":"University of California - San Diego, La Jolla, CA, USA","institution_ids":["https://openalex.org/I36258959"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5048394730","display_name":"Stefan Savage","orcid":"https://orcid.org/0000-0001-6617-8029"},"institutions":[{"id":"https://openalex.org/I36258959","display_name":"University of California San Diego","ror":"https://ror.org/0168r3w48","country_code":"US","type":"education","lineage":["https://openalex.org/I36258959"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Stefan Savage","raw_affiliation_strings":["University of California, San Diego, La Jolla, CA, USA","University of California - San Diego, La Jolla, CA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of California, San Diego, La Jolla, CA, USA","institution_ids":["https://openalex.org/I36258959"]},{"raw_affiliation_string":"University of California - San Diego, La Jolla, CA, USA","institution_ids":["https://openalex.org/I36258959"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I36258959"],"apc_list":null,"apc_paid":null,"fwci":17.8779,"has_fulltext":false,"cited_by_count":359,"citation_normalized_percentile":{"value":0.99642404,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"27","last_page":"38"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.996399998664856,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.9837999939918518,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6147838830947876}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6147838830947876}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/1455770.1455776","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1455770.1455776","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 15th ACM conference on Computer and communications security","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.6800000071525574,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320330412","display_name":"Scheme for Promotion of Academic and Research Collaboration","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":8,"referenced_works":["https://openalex.org/W1542906860","https://openalex.org/W1598047736","https://openalex.org/W1655226010","https://openalex.org/W2098010707","https://openalex.org/W2102970979","https://openalex.org/W2104932676","https://openalex.org/W2162800072","https://openalex.org/W2911819491"],"related_works":["https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W2358668433","https://openalex.org/W2376932109","https://openalex.org/W2382290278","https://openalex.org/W2350741829","https://openalex.org/W2130043461","https://openalex.org/W2530322880","https://openalex.org/W1596801655"],"abstract_inverted_index":{"This":[0],"paper":[1,91],"reconsiders":[2],"the":[3,30,59,64,70,98,121,140,170],"threat":[4,57,141],"posed":[5,142],"by":[6,13,143,168],"Shacham's":[7],"return-oriented":[95,134,144],"programming":[96,127],"--":[10,37],"a":[11,55,100,112,124,130],"technique":[12],"which":[14],"W-xor-X-style":[15],"hardware":[16],"protections":[17],"are":[18],"evaded":[19],"via":[20],"carefully":[21],"crafted":[22],"stack":[23],"frames":[24],"that":[25,43,139,162],"divert":[26],"control":[27,108],"flow":[28],"into":[29],"middle":[31],"of":[32,86,115,120,158,172],"existing":[33],"variable-length":[34],"x86":[35,71],"instructions":[36,41],"creating":[38],"short":[39],"new":[40],"streams":[42],"then":[44],"return.":[45],"We":[46,110],"believe":[47],"this":[48,90],"attack":[49],"is":[50,66,78],"both":[51],"more":[52],"general":[53,94,125],"and":[54,81,129,149],"greater":[56],"than":[58],"author":[60],"appreciated.":[61],"In":[62,89],"fact,":[63],"vulnerability":[65],"not":[67],"limited":[68],"to":[69,164],"architecture":[72,105],"or":[73],"any":[74],"particular":[75],"operating":[76],"system,":[77],"readily":[79],"exploitable,":[80],"bypasses":[82],"an":[83,155],"entire":[84,156],"category":[85],"malware":[87],"protections.":[88],"we":[92,137],"demonstrate":[93],"on":[97],"SPARC,":[99],"fixed":[101],"instruction":[102],"length":[103],"RISC":[104],"with":[106],"structured":[107],"flow.":[109],"construct":[111],"Turing-complete":[113],"library":[114],"code":[116],"gadgets":[117],"using":[118],"snippets":[119],"Solaris":[122],"libc,":[123],"purpose":[126],"language,":[128],"compiler":[131],"for":[132,154],"constructing":[133],"exploits.":[135],"Finally,":[136],"argue":[138],"programming,":[145],"across":[146],"all":[147],"architectures":[148],"systems,":[150],"has":[151],"negative":[152],"implications":[153],"class":[157],"security":[159],"mechanisms:":[160],"those":[161],"seek":[163],"prevent":[165],"malicious":[166,173],"computation":[167],"preventing":[169],"execution":[171],"code.":[174]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":7},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":9},{"year":2022,"cited_by_count":8},{"year":2021,"cited_by_count":24},{"year":2020,"cited_by_count":31},{"year":2019,"cited_by_count":26},{"year":2018,"cited_by_count":14},{"year":2017,"cited_by_count":30},{"year":2016,"cited_by_count":32},{"year":2015,"cited_by_count":27},{"year":2014,"cited_by_count":23},{"year":2013,"cited_by_count":22},{"year":2012,"cited_by_count":30}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}