In this chapter, we describe code-pointer integrity (CPI), a new design point that guarantees
the integrity of all code pointers in a program (eg, function pointers, saved return addresses) …

Reverse engineering of binary executables is a difficult task which gets more involved by the
way compilers translate high-level concepts used in paradigms such as objectoriented …

Programs aiming for low runtime overhead and high availability draw on several object-
oriented features available in the C/C++ programming language, such as dynamic object …

We present, VIP, an approach to boosting the precision of Virtual call Integrity Protection for
large-scale real-world C++ programs (eg, Chrome) by using pointer analysis for the first …

VTable hijacking has lately been promoted to the de facto technique for exploiting C++
applications, and in particular web browsers. VTables, however, can be manipulated without …

Hash-based message authentication code (HMAC) involves a secret cryptographic key and
an underlying crypto-graphic hash function. HMAC is used to simultaneously verify both …

Control-flow hijacking attacks are used to perform malicious computations. Current solutions
for assessing the attack surface after a control flow integrity (CFI) policy was applied can …

Unsafe programming systems are still very popular, despite the shortcomings due to several
published memory-corruption vulnerabilities. Toward defending memory corruption …

As human activities have moved to the digital domain, so have all the well-known malicious
behaviors including fraud, theft, and other trickery. There is no silver bullet, and each …

Programs aiming for low runtime overhead and high availability draw on several object-
oriented features available in the C/C++ programming language, such as dynamic object …