{"id":"https://openalex.org/W4388967448","doi":"https://doi.org/10.3233/jcs-230053","title":"DSLR\u2013: A low-overhead data structure layout randomization for defending data-oriented programming","display_name":"DSLR\u2013: A low-overhead data structure layout randomization for defending data-oriented programming","publication_year":2023,"publication_date":"2023-11-24","ids":{"openalex":"https://openalex.org/W4388967448","doi":"https://doi.org/10.3233/jcs-230053"},"language":"en","primary_location":{"id":"doi:10.3233/jcs-230053","is_oa":false,"landing_page_url":"https://doi.org/10.3233/jcs-230053","pdf_url":null,"source":{"id":"https://openalex.org/S106992369","display_name":"Journal of Computer Security","issn_l":"0926-227X","issn":["0926-227X","1875-8924"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310318577","host_organization_name":"IOS Press","host_organization_lineage":["https://openalex.org/P4310318577"],"host_organization_lineage_names":["IOS Press"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Computer Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5109399861","display_name":"Jin Wei","orcid":null},"institutions":[{"id":"https://openalex.org/I24943067","display_name":"Fudan University","ror":"https://ror.org/013q1eq08","country_code":"CN","type":"education","lineage":["https://openalex.org/I24943067"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Jin Wei","raw_affiliation_strings":["Institute of BigData, Fudan University, Shanghai, China","School of Computer Science, Fudan University, Shanghai, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of BigData, Fudan University, Shanghai, China","institution_ids":["https://openalex.org/I24943067"]},{"raw_affiliation_string":"School of Computer Science, Fudan University, Shanghai, China","institution_ids":["https://openalex.org/I24943067"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5109399861","display_name":"Jin Wei","orcid":null},"institutions":[{"id":"https://openalex.org/I24943067","display_name":"Fudan University","ror":"https://ror.org/013q1eq08","country_code":"CN","type":"education","lineage":["https://openalex.org/I24943067"]},{"id":"https://openalex.org/I4210155350","display_name":"Purple Mountain Laboratories","ror":"https://ror.org/04zcbk583","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210155350"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jin Wei","raw_affiliation_strings":["Institute of BigData, Fudan University, Shanghai, China","School of Computer Science, Fudan University, Shanghai, China","Purple Mountain Laboratories, Nanjing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of BigData, Fudan University, Shanghai, China","institution_ids":["https://openalex.org/I24943067"]},{"raw_affiliation_string":"School of Computer Science, Fudan University, Shanghai, China","institution_ids":["https://openalex.org/I24943067"]},{"raw_affiliation_string":"Purple Mountain Laboratories, Nanjing, China","institution_ids":["https://openalex.org/I4210155350"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100400290","display_name":"Ping Chen","orcid":"https://orcid.org/0000-0001-5836-936X"},"institutions":[{"id":"https://openalex.org/I24943067","display_name":"Fudan University","ror":"https://ror.org/013q1eq08","country_code":"CN","type":"education","lineage":["https://openalex.org/I24943067"]},{"id":"https://openalex.org/I4210155350","display_name":"Purple Mountain Laboratories","ror":"https://ror.org/04zcbk583","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210155350"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Ping Chen","raw_affiliation_strings":["Institute of BigData, Fudan University, Shanghai, China","Purple Mountain Laboratories, Nanjing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of BigData, Fudan University, Shanghai, China","institution_ids":["https://openalex.org/I24943067"]},{"raw_affiliation_string":"Purple Mountain Laboratories, Nanjing, China","institution_ids":["https://openalex.org/I4210155350"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5100400290","https://openalex.org/A5109399861"],"corresponding_institution_ids":["https://openalex.org/I24943067","https://openalex.org/I4210155350"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.13653362,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"32","issue":"3","first_page":"221","last_page":"246"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9764000177383423,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8225103616714478},{"id":"https://openalex.org/keywords/overhead","display_name":"Overhead (engineering)","score":0.7905540466308594},{"id":"https://openalex.org/keywords/data-structure","display_name":"Data structure","score":0.5067811608314514},{"id":"https://openalex.org/keywords/control-flow","display_name":"Control flow","score":0.46410831809043884},{"id":"https://openalex.org/keywords/range","display_name":"Range (aeronautics)","score":0.4188287556171417},{"id":"https://openalex.org/keywords/data-flow-diagram","display_name":"Data flow diagram","score":0.41450071334838867},{"id":"https://openalex.org/keywords/computer-engineering","display_name":"Computer engineering","score":0.3309742212295532},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.3218728303909302},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.22612842917442322},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.15792244672775269},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.13149473071098328},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.09598615765571594}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8225103616714478},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.7905540466308594},{"id":"https://openalex.org/C162319229","wikidata":"https://www.wikidata.org/wiki/Q175263","display_name":"Data structure","level":2,"score":0.5067811608314514},{"id":"https://openalex.org/C160191386","wikidata":"https://www.wikidata.org/wiki/Q868299","display_name":"Control flow","level":2,"score":0.46410831809043884},{"id":"https://openalex.org/C204323151","wikidata":"https://www.wikidata.org/wiki/Q905424","display_name":"Range (aeronautics)","level":2,"score":0.4188287556171417},{"id":"https://openalex.org/C489000","wikidata":"https://www.wikidata.org/wiki/Q747385","display_name":"Data flow diagram","level":2,"score":0.41450071334838867},{"id":"https://openalex.org/C113775141","wikidata":"https://www.wikidata.org/wiki/Q428691","display_name":"Computer engineering","level":1,"score":0.3309742212295532},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.3218728303909302},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.22612842917442322},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.15792244672775269},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.13149473071098328},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.09598615765571594},{"id":"https://openalex.org/C146978453","wikidata":"https://www.wikidata.org/wiki/Q3798668","display_name":"Aerospace engineering","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.3233/jcs-230053","is_oa":false,"landing_page_url":"https://doi.org/10.3233/jcs-230053","pdf_url":null,"source":{"id":"https://openalex.org/S106992369","display_name":"Journal of Computer Security","issn_l":"0926-227X","issn":["0926-227X","1875-8924"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310318577","host_organization_name":"IOS Press","host_organization_lineage":["https://openalex.org/P4310318577"],"host_organization_lineage_names":["IOS Press"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Computer Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.41999998688697815,"display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":31,"referenced_works":["https://openalex.org/W1495630617","https://openalex.org/W1558430956","https://openalex.org/W1575709006","https://openalex.org/W1969501726","https://openalex.org/W2059278087","https://openalex.org/W2089448621","https://openalex.org/W2098806455","https://openalex.org/W2101512909","https://openalex.org/W2155851497","https://openalex.org/W2295441334","https://openalex.org/W2301548261","https://openalex.org/W2512784977","https://openalex.org/W2612168751","https://openalex.org/W2891196279","https://openalex.org/W2935908209","https://openalex.org/W2955426500","https://openalex.org/W2969354474","https://openalex.org/W3019415692","https://openalex.org/W3033191713","https://openalex.org/W3092233123","https://openalex.org/W3113170597","https://openalex.org/W3138733102","https://openalex.org/W3156527753","https://openalex.org/W3198309584","https://openalex.org/W3199968393","https://openalex.org/W3212335816","https://openalex.org/W3212671845","https://openalex.org/W4288057748","https://openalex.org/W4302784197","https://openalex.org/W6600922481","https://openalex.org/W6733101629"],"related_works":["https://openalex.org/W2188516702","https://openalex.org/W4246377515","https://openalex.org/W1549956274","https://openalex.org/W2095925360","https://openalex.org/W161202748","https://openalex.org/W2052160877","https://openalex.org/W2052485000","https://openalex.org/W2040778456","https://openalex.org/W2027700796","https://openalex.org/W2000490092"],"abstract_inverted_index":{"By":[0],"developing":[1],"a":[2,49,107,120,145],"Turing-complete":[3,139],"non-control":[4,81],"data":[5,53,68,82,132,165],"attack":[6],"to":[7,34,44,73,123,126,137,159,188],"bypass":[8],"existing":[9,156],"defenses":[10],"against":[11],"control":[12],"flow":[13],"attacks,":[14,37,176],"Data-Oriented":[15],"Programming":[16],"(DOP)":[17],"has":[18],"gained":[19],"significant":[20],"attention":[21],"from":[22],"researchers":[23],"in":[24,83,133],"recent":[25],"years.":[26],"While":[27],"several":[28],"defense":[29],"techniques":[30],"have":[31],"been":[32],"proposed":[33],"mitigate":[35],"DOP":[36,74,175],"they":[38,104],"often":[39],"introduce":[40,143],"substantial":[41],"overhead":[42,179,184],"due":[43],"the":[45,65,79,84,99,111,130,155,162,189],"blind":[46],"protection":[47],"of":[48,52,71,110],"large":[50],"range":[51],"objects.":[54],"To":[55],"address":[56],"this":[57,87],"issue,":[58],"we":[59,89,118,142],"focus":[60],"on":[61,93,129],"selecting":[62],"and":[63,97,182],"protecting":[64],"specific":[66],"target":[67,100,131,164],"that":[69,103,171],"are":[70],"interest":[72],"attackers,":[75],"rather":[76],"than":[77],"securing":[78],"entire":[80],"program.":[85],"In":[86],"regard,":[88],"perform":[90],"static":[91],"analysis":[92],"20":[94,135],"real-world":[95],"applications":[96,136],"identify":[98],"data,":[101],"verifying":[102],"constitute":[105],"only":[106,160],"small":[108],"percentage":[109],"overall":[112],"program,":[113],"averaging":[114],"around":[115],"3%.":[116],"Additionally,":[117],"propose":[119],"semi-automated":[121],"tool":[122],"analyze":[124],"how":[125],"chain":[127],"operations":[128],"these":[134],"achieve":[138],"attacks.":[140],"Furthermore,":[141],"DSLR-:":[144],"low-overhead":[146],"Data":[147],"Structure":[148],"Layout":[149],"Randomization":[150],"(DSLR)":[151],"method,":[152],"which":[153],"modifies":[154],"DSLR":[157,191],"technique":[158],"randomize":[161],"selected":[163],"for":[166],"DOP.":[167],"Experimental":[168],"results":[169],"demonstrate":[170],"DSLR-":[172],"effectively":[173],"mitigates":[174],"reducing":[177],"performance":[178],"by":[180,185],"71.2%":[181],"memory":[183],"82.5%":[186],"compared":[187],"original":[190],"technique.":[192]},"counts_by_year":[],"updated_date":"2026-07-21T05:50:15.549392","created_date":"2025-10-10T00:00:00"}