{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T05:01:55Z","timestamp":1750309315821,"version":"3.41.0"},"reference-count":64,"publisher":"Association for Computing Machinery (ACM)","issue":"1","license":[{"start":{"date-parts":[[2023,12,15]],"date-time":"2023-12-15T00:00:00Z","timestamp":1702598400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/501100001809","name":"Natural Science Foundation of China","doi-asserted-by":"crossref","award":["62172239, 62372254"],"award-info":[{"award-number":["62172239, 62372254"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"crossref"}]},{"name":"Key Research and Development Program of Guangdong, China","award":["2021B0101310002"],"award-info":[{"award-number":["2021B0101310002"]}]},{"name":"Shandong Provincial Natural Science Foundation, China","award":["ZR2022LZH009"],"award-info":[{"award-number":["ZR2022LZH009"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["ACM Trans. Archit. Code Optim."],"published-print":{"date-parts":[[2024,3,31]]},"abstract":"<jats:p>\n            Code-reuse attacks have the capability to craft malicious instructions from small code fragments, commonly referred to as \u201cgadgets.\u201d These gadgets are generated by JIT (Just-In-Time) engines as integral components of native instructions, with the flexibility to be embedded in various fields, including\n            <jats:italic>Displacement<\/jats:italic>\n            . In this article, we introduce a novel approach for potential gadget insertion, achieved through the manipulation of\n            <jats:italic>ModR\/M<\/jats:italic>\n            and\n            <jats:italic>SIB<\/jats:italic>\n            bytes via JavaScript code. This manipulation influences a JIT engine\u2019s register allocation and code generation algorithms. These newly generated gadgets do not rely on constants and thus evade existing constant blinding schemes. Furthermore, they can be combined with 1-byte constants, a combination that proves to be challenging to defend against using conventional constant blinding techniques. To showcase the feasibility of our approach, we provide proof-of-concept (POC) code for three distinct types of gadgets. Our research underscores the potential for attackers to exploit\n            <jats:italic>ModR\/M<\/jats:italic>\n            and\n            <jats:italic>SIB<\/jats:italic>\n            bytes within JIT-generated native instructions. In response, we propose a practical defense mechanism to mitigate such attacks. We introduce\n            <jats:italic>JiuJITsu<\/jats:italic>\n            , a security-enhanced register allocation scheme designed to prevent harmful register assignments during the JIT code generation phase, thereby thwarting the generation of these malicious gadgets. We conduct a comprehensive analysis of\n            <jats:italic>JiuJITsu<\/jats:italic>\n            \u2019s effectiveness in defending against code-reuse attacks. Our findings demonstrate that it incurs a runtime overhead of under 1% when evaluated using JetStream2 benchmarks and real-world websites.\n          <\/jats:p>","DOI":"10.1145\/3631526","type":"journal-article","created":{"date-parts":[[2023,11,3]],"date-time":"2023-11-03T20:07:02Z","timestamp":1699042022000},"page":"1-26","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["JiuJITsu: Removing Gadgets with Safe Register Allocation for JIT Code Generation"],"prefix":"10.1145","volume":"21","author":[{"ORCID":"https:\/\/orcid.org\/0009-0008-0613-935X","authenticated-orcid":false,"given":"Zhang","family":"Jiang","sequence":"first","affiliation":[{"name":"Nankai University, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6604-6106","authenticated-orcid":false,"given":"Ying","family":"Chen","sequence":"additional","affiliation":[{"name":"Nankai University, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9836-558X","authenticated-orcid":false,"given":"Xiaoli","family":"Gong","sequence":"additional","affiliation":[{"name":"Nankai University, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9086-1178","authenticated-orcid":false,"given":"Jin","family":"Zhang","sequence":"additional","affiliation":[{"name":"Nankai University, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0840-4846","authenticated-orcid":false,"given":"Wenwen","family":"Wang","sequence":"additional","affiliation":[{"name":"University of Georgia, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9653-8777","authenticated-orcid":false,"given":"Pen-Chung","family":"Yew","sequence":"additional","affiliation":[{"name":"University of Minnesota, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2023,12,15]]},"reference":[{"key":"e_1_3_1_2_2","doi-asserted-by":"crossref","unstructured":"E. C. Fieller. 1954. Some problems in interval estimation. Journal of the Royal Statistical Society. Series B 811 (Methodological) 16 2 (1954) 175\u2013185. http:\/\/www.jstor.org\/stable\/2984043","DOI":"10.1111\/j.2517-6161.1954.tb00159.x"},{"key":"e_1_3_1_3_2","unstructured":"Fermin J. Serna. 2013. Flash JIT-Spraying for Info Leak Gadgets . Retrieved from https:\/\/dl.packetstormsecurity.net\/papers\/general\/Flash_Jit_InfoLeak_Gadgets.pdf"},{"key":"e_1_3_1_4_2","unstructured":"Chromium Bugs Issue 1031142. 2019. Security: Site Isolation Bypass and Browser Code execution with heap-use-after-free. Retrieved from https:\/\/bugs.chromium.org\/p\/chromium\/issues\/detail?id=1031142"},{"key":"e_1_3_1_5_2","unstructured":"Chromium Bugs Issue 1055393. 2020. UAF in chrome chrome!content::BrowserAccessibilityManager::GetFromAXNode. Retrieved from https:\/\/bugs.chromium.org\/p\/chromium\/issues\/detail?id=1055393"},{"key":"e_1_3_1_6_2","unstructured":"Chromium Bugs Issue 1062091. 2020. Security: UAF in Installed AppProviderImpl. Retrieved from https:\/\/bugs.chromium.org\/p\/chromium\/issues\/detail?id=1062091"},{"key":"e_1_3_1_7_2","doi-asserted-by":"publisher","DOI":"10.1145\/3372297.3417248"},{"key":"e_1_3_1_8_2","unstructured":"V8 Free Register Allocation. 2021. Retrieved from https:\/\/github.com\/v8\/v8\/blob\/8.9-lkgr\/src\/compiler\/backend\/register-allocator.cc#L4061-L4097"},{"key":"e_1_3_1_9_2","unstructured":"Starr Andersen and Vincent Abella. 2004. Microsoft TechNet article: Data execution prevention. changes to functionality in Microsoft Windows XP service pack 2 part 3: Memory protection technologies."},{"key":"e_1_3_1_10_2","doi-asserted-by":"publisher","DOI":"10.1145\/1993498.1993540"},{"key":"e_1_3_1_11_2","volume-title":"Symposium on Network and Distributed System Security (NDSS\u201915)","author":"Athanasakis Michalis","year":"2015","unstructured":"Michalis Athanasakis, Elias Athanasopoulos, Michalis Polychronakis, Georgios Portokalidis, and Sotiris Ioannidis. 2015. The devil is in the constants: Bypassing defenses in browser JIT engines. In Symposium on Network and Distributed System Security (NDSS\u201915)."},{"key":"e_1_3_1_12_2","doi-asserted-by":"publisher","DOI":"10.1145\/3517208.3523751"},{"key":"e_1_3_1_13_2","unstructured":"Dion Blazakis. 2010. Interpreter exploitation: Pointer inference and JIT spraying. In Proceedings of the 4th USENIX Conference on Offensive Technologies (WOOT\u201910) . USENIX Association 1\u20139."},{"key":"e_1_3_1_14_2","first-page":"30","volume-title":"6th ACM Symposium on Information, Computer and Communications Security","author":"Bletsch Tyler","year":"2011","unstructured":"Tyler Bletsch, Xuxian Jiang, Vince W. Freeh, and Zhenkai Liang. 2011. Jump-oriented programming: A new class of code-reuse attack. In 6th ACM Symposium on Information, Computer and Communications Security. 30\u201340."},{"key":"e_1_3_1_15_2","unstructured":"Instruction ModR\/M Byte. 2021. Retrieved from https:\/\/datacadamia.com\/lang\/assembly\/intel\/modrm"},{"key":"e_1_3_1_16_2","first-page":"385","volume-title":"23rd USENIX Security Symposium (USENIX Security\u201914)","author":"Carlini Nicholas","year":"2014","unstructured":"Nicholas Carlini and David Wagner. 2014. ROP is still dangerous: Breaking modern defenses. In 23rd USENIX Security Symposium (USENIX Security\u201914). USENIX Association, 385\u2013399. Retrieved from https:\/\/www.usenix.org\/conference\/usenixsecurity14\/technical-sessions\/presentation\/carlini"},{"key":"e_1_3_1_17_2","doi-asserted-by":"publisher","DOI":"10.1049\/iet-ifs.2012.0142"},{"key":"e_1_3_1_18_2","doi-asserted-by":"crossref","unstructured":"Yueqiang Cheng Zongwei Zhou Yu Miao Xuhua Ding and Robert H. Deng. 2014. ROPecker: A generic and practical approach for defending against ROP attack. In Symposium on Network and Distributed System Security (NDSS\u201914) .","DOI":"10.14722\/ndss.2014.23156"},{"key":"e_1_3_1_19_2","doi-asserted-by":"publisher","DOI":"10.32657\/10220\/47664"},{"key":"e_1_3_1_20_2","first-page":"302","volume-title":"5th IEEE International Workshop on Computer Architectures for Machine Perception","author":"Conte Gianni","year":"2000","unstructured":"Gianni Conte, Stefano Tommesani, and Francesco Zanichelli. 2000. The long and winding road to high-performance image processing with MMX\/SSE. In 5th IEEE International Workshop on Computer Architectures for Machine Perception. IEEE, 302\u2013310."},{"key":"e_1_3_1_21_2","unstructured":"X86 Calling Conventions. 2023. Retrieved from https:\/\/en.wikipedia.org\/wiki\/X86_calling_conventions"},{"key":"e_1_3_1_22_2","doi-asserted-by":"crossref","unstructured":"Stephen J. Crane Stijn Volckaert Felix Schuster Christopher Liebchen Per Larsen Lucas Davi Ahmad-Reza Sadeghi Thorsten Holz Bjorn De Sutter and Michael Franz. 2015. It\u2019s a TRaP: Table randomization and protection against function-reuse attacks. In Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security 243\u2013255.","DOI":"10.1145\/2810103.2813682"},{"key":"e_1_3_1_23_2","volume-title":"Benelux Workshop on Information and System Security (WISSEC\u201910)","author":"Groef Willem De","year":"2010","unstructured":"Willem De Groef, Nick Nikiforakis, Yves Younan, and Frank Piessens. 2010. JITSec: Just-in-time security for code injection attacks. In Benelux Workshop on Information and System Security (WISSEC\u201910)."},{"key":"e_1_3_1_24_2","unstructured":"Node.js Document. 2021. About Node.js. Retrieved from https:\/\/nodejs.org\/en\/about\/"},{"key":"e_1_3_1_25_2","unstructured":"X86-64 Instruction Encoding. 2021. Retrieved from https:\/\/wiki.osdev.org\/X86-64_Instruction_Encoding"},{"key":"e_1_3_1_26_2","unstructured":"SpiderMonkey JavaScript\/WebAssembly Engine. 2021. Retrieved from https:\/\/spidermonkey.dev\/"},{"key":"e_1_3_1_27_2","volume-title":"12th USENIX Workshop on Offensive Technologies (WOOT\u201918)","author":"Gawlik Robert","year":"2018","unstructured":"Robert Gawlik and Thorsten Holz. 2018. SoK: Make JIT-spray great again. In 12th USENIX Workshop on Offensive Technologies (WOOT\u201918). USENIX Association. Retrieved from https:\/\/www.usenix.org\/conference\/woot18\/presentation\/gawlik"},{"key":"e_1_3_1_28_2","first-page":"475","volume-title":"21st USENIX Security Symposium (USENIX Security\u201912)","author":"Giuffrida Cristiano","year":"2012","unstructured":"Cristiano Giuffrida, Anton Kuijsten, and Andrew S. Tanenbaum. 2012. Enhanced operating system security through efficient and fine-grained address space randomization. In 21st USENIX Security Symposium (USENIX Security\u201912). USENIX Association, 475\u2013490. Retrieved from https:\/\/www.usenix.org\/conference\/usenixsecurity12\/technical-sessions\/presentation\/giuffrida"},{"key":"e_1_3_1_29_2","unstructured":"Google. 2019. Web Page Replay. Retrieved from https:\/\/github.com\/catapult-project\/catapult\/blob\/master\/web_page_replay_go\/README.md"},{"key":"e_1_3_1_30_2","first-page":"993","volume-title":"ACM SIGSAC Conference on Computer & Communications Security","author":"Homescu Andrei","year":"2013","unstructured":"Andrei Homescu, Stefan Brunthaler, Per Larsen, and Michael Franz. 2013. Librando: Transparent code randomization for just-in-time compilers. In ACM SIGSAC Conference on Computer & Communications Security. 993\u20131004."},{"key":"e_1_3_1_31_2","first-page":"64","article-title":"Microgadgets: Size does matter in Turing-complete return-oriented programming. In","author":"Homescu Andrei","year":"2012","unstructured":"Andrei Homescu, Michael Stewart, Per Larsen, Stefan Brunthaler, and Michael Franz. 2012. Microgadgets: Size does matter in Turing-complete return-oriented programming. In USENIX Workshop on Offensive Technologies. 64\u201376.","journal-title":"USENIX Workshop on Offensive Technologies"},{"key":"e_1_3_1_32_2","unstructured":"Sandbox in Chromium. 2021. Retrieved from https:\/\/chromium.googlesource.com\/chromium\/src\/+\/refs\/heads\/main\/docs\/design\/sandbox.md"},{"key":"e_1_3_1_33_2","unstructured":"Just in-time compilation. 2021. Retrieved from https:\/\/en.wikipedia.org\/wiki\/Just-in-time_compilation"},{"key":"e_1_3_1_34_2","unstructured":"V8 VEX Instructions. 2021. Retrieved from https:\/\/github.com\/v8\/v8\/blob\/8.9-lkgr\/src\/compiler\/backend\/x64\/instruction-codes-x64.h#L112-L125"},{"key":"e_1_3_1_35_2","unstructured":"JetStream2. 2021. Retrieved from https:\/\/browserbench.org\/JetStream\/"},{"key":"e_1_3_1_36_2","unstructured":"JSC-Webkit. 2022. Retrieved from https:\/\/trac.webkit.org\/wiki\/JSC"},{"key":"e_1_3_1_37_2","doi-asserted-by":"crossref","DOI":"10.1007\/978-3-031-02346-0","volume-title":"Automated Software Diversity","author":"Larsen Per","year":"2016","unstructured":"Per Larsen, Stefan Brunthaler, Lucas Davi, Ahmad-Reza Sadeghi, and Michael Franz. 2016. Automated Software Diversity. Springer."},{"key":"e_1_3_1_38_2","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2014.25"},{"key":"e_1_3_1_39_2","volume-title":"Symposium on Network and Distributed System Security (NDSS\u201915)","author":"Lian Wilson","year":"2015","unstructured":"Wilson Lian, Hovav Shacham, and Stefan Savage. 2015. Too LeJIT to quit: Extending JIT spraying to ARM. In Symposium on Network and Distributed System Security (NDSS\u201915). Citeseer."},{"key":"e_1_3_1_40_2","volume-title":"Symposium on Network and Distributed System Security (NDSS\u201917)","author":"Lian Wilson","year":"2017","unstructured":"Wilson Lian, Hovav Shacham, and Stefan Savage. 2017. A call to ARMs: Understanding the costs and benefits of JIT spraying mitigations. In Symposium on Network and Distributed System Security (NDSS\u201917)."},{"key":"e_1_3_1_41_2","volume-title":"JIT Spraying Threats on ARM and Defense by Diversification","author":"Lian Wing-Soon Wilson","year":"2016","unstructured":"Wing-Soon Wilson Lian. 2016. JIT Spraying Threats on ARM and Defense by Diversification. Ph. D. Dissertation. UC San Diego."},{"key":"e_1_3_1_42_2","article-title":"Introduction to Intel advanced vector extensions","volume":"23","author":"Lomont Chris","year":"2011","unstructured":"Chris Lomont. 2011. Introduction to Intel advanced vector extensions. Intel White Paper 23 (2011).","journal-title":"Intel White Paper"},{"key":"e_1_3_1_43_2","first-page":"139","volume-title":"25th USENIX Security Symposium (USENIX Security\u201916)","author":"Maisuradze Giorgi","year":"2016","unstructured":"Giorgi Maisuradze, Michael Backes, and Christian Rossow. 2016. What cannot be read, cannot be leveraged? Revisiting assumptions of JIT-ROP defenses. In 25th USENIX Security Symposium (USENIX Security\u201916). 139\u2013156."},{"key":"e_1_3_1_44_2","volume-title":"Symposium on Network and Distributed System Security (NDSS\u201917)","author":"Maisuradze Giorgi","year":"2017","unstructured":"Giorgi Maisuradze, Michael Backes, and Christian Rossow. 2017. Dachshund: Digging for and securing against (non-) blinded constants in JIT code. In Symposium on Network and Distributed System Security (NDSS\u201917)."},{"key":"e_1_3_1_45_2","first-page":"301","volume-title":"14th Annual Conference on Privacy, Security and Trust (PST\u201916)","author":"Mishra Mohit","year":"2016","unstructured":"Mohit Mishra, Benoit Baudry, et\u00a0al. 2016. libmask: Protecting browser JIT engines from the devil in the constants. In 14th Annual Conference on Privacy, Security and Trust (PST\u201916). IEEE, 301\u2013308."},{"key":"e_1_3_1_46_2","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2660281"},{"key":"e_1_3_1_47_2","first-page":"49","volume-title":"26th Annual Computer Security Applications Conference","author":"Onarlioglu Kaan","year":"2010","unstructured":"Kaan Onarlioglu, Leyla Bilge, Andrea Lanzi, Davide Balzarotti, and Engin Kirda. 2010. G-Free: Defeating return-oriented programming through gadget-less binaries. In 26th Annual Computer Security Applications Conference. 49\u201358."},{"key":"e_1_3_1_48_2","unstructured":"CTF 2019 oob v8. 2019. Retrieved from https:\/\/changochen.github.io\/2019-04-29-starctf-2019.html"},{"key":"e_1_3_1_49_2","unstructured":"ChakraCore Architecture Overview. 2021. Retrieved from https:\/\/github.com\/chakra-core\/ChakraCore\/wiki\/Architecture-Overview"},{"key":"e_1_3_1_50_2","first-page":"601","volume-title":"IEEE Symposium on Security and Privacy","author":"Pappas Vasilis","year":"2012","unstructured":"Vasilis Pappas, Michalis Polychronakis, and Angelos D. Keromytis. 2012. Smashing the gadgets: Hindering return-oriented programming using in-place code randomization. In IEEE Symposium on Security and Privacy. IEEE, 601\u2013615."},{"key":"e_1_3_1_51_2","first-page":"447","volume-title":"22nd USENIX Security Symposium (USENIX Security\u201913)","author":"Pappas Vasilis","year":"2013","unstructured":"Vasilis Pappas, Michalis Polychronakis, and Angelos D. Keromytis. 2013. Transparent ROP exploit mitigation using indirect branch tracing. In 22nd USENIX Security Symposium (USENIX Security\u201913). USENIX Association. 447\u2013462. Retrieved from https:\/\/www.usenix.org\/conference\/usenixsecurity13\/technical-sessions\/paper\/pappas"},{"key":"e_1_3_1_52_2","unstructured":"Data Execution Prevention. 2004. Retrieved from http:\/\/technet.microsoft.com\/en-us\/library\/bb457155.aspx"},{"key":"e_1_3_1_53_2","unstructured":"RankRanger. 2021. Top 100 Websites Ranking on the Web. Retrieved from https:\/\/www.rankranger.com\/top-websites"},{"key":"e_1_3_1_54_2","unstructured":"V8 register allocation. 2021. Retrieved from https:\/\/docs.google.com\/document\/d\/1aeUugkWCF1biPB4tTZ2KT3mmRSDV785yWZhwzlJe5xY\/edit"},{"key":"e_1_3_1_55_2","doi-asserted-by":"publisher","DOI":"10.1145\/1315245.1315313"},{"key":"e_1_3_1_56_2","unstructured":"Edge Super Duper Secure Mode turns off the JavaScript JIT compiler for extra security. 2021. Retrieved from https:\/\/microsoftedge.github.io\/edgevr\/posts\/Super-Duper-Secure-Mode"},{"key":"e_1_3_1_57_2","unstructured":"V8. 2020. V8 Turbofan Register Allocation Design. Retrieved from https:\/\/docs.google.com\/document\/d\/1aeUugkWCF1biPB4tTZ2KT3mmRSDV785yWZhwzlJe5xY"},{"key":"e_1_3_1_58_2","unstructured":"V8. 2021. V8 Document. Retrieved from https:\/\/v8.dev"},{"key":"e_1_3_1_59_2","first-page":"1221","volume-title":"28th USENIX Security Symposium (USENIX Security\u201919)","author":"Vahldiek-Oberwagner Anjo","year":"2019","unstructured":"Anjo Vahldiek-Oberwagner, Eslam Elnikety, Nuno O. Duarte, Michael Sammler, Peter Druschel, and Deepak Garg. 2019. ERIM: Secure, efficient in-process isolation with protection keys (MPK). In 28th USENIX Security Symposium (USENIX Security\u201919). 1221\u20131238."},{"key":"e_1_3_1_60_2","first-page":"159","volume-title":"USENIX Annual Technical Conference (USENIX ATC\u201916)","author":"Vesuna Jamshed","year":"2016","unstructured":"Jamshed Vesuna, Colin Scott, Michael Buettner, Michael Piatek, Arvind Krishnamurthy, and Scott Shenker. 2016. Caching doesn\u2019t improve mobile web performance (much). In USENIX Annual Technical Conference (USENIX ATC\u201916). USENIX Association, 159\u2013165."},{"key":"e_1_3_1_61_2","first-page":"157","volume-title":"ACM Conference on Computer and Communications Security","author":"Wartell Richard","year":"2012","unstructured":"Richard Wartell, Vishwath Mohan, Kevin W. Hamlen, and Zhiqiang Lin. 2012. Binary stirring: Self-randomizing instruction addresses of legacy x86 binary code. In ACM Conference on Computer and Communications Security. 157\u2013168."},{"key":"e_1_3_1_62_2","doi-asserted-by":"publisher","DOI":"10.1145\/1866307.1866415"},{"key":"e_1_3_1_63_2","first-page":"170","volume-title":"8th Annual IEEE\/ACM International Symposium on Code Generation and Optimization","author":"Wimmer Christian","year":"2010","unstructured":"Christian Wimmer and Michael Franz. 2010. Linear scan register allocation on SSA form. In 8th Annual IEEE\/ACM International Symposium on Code Generation and Optimization. 170\u2013179."},{"key":"e_1_3_1_64_2","first-page":"143","volume-title":"7th International Conference on Availability, Reliability and Security","author":"Wu Rui","year":"2012","unstructured":"Rui Wu, Ping Chen, Bing Mao, and Li Xie. 2012. RIM: A method to defend from JIT spraying attack. In 7th International Conference on Availability, Reliability and Security. IEEE, 143\u2013148."},{"key":"e_1_3_1_65_2","first-page":"66","volume-title":"International Symposium on Recent Advances in Intrusion Detection","author":"Yuan Pinghai","year":"2015","unstructured":"Pinghai Yuan, Qingkai Zeng, and Xuhua Ding. 2015. Hardware-assisted fine-grained code-reuse attack detection. In International Symposium on Recent Advances in Intrusion Detection. Springer, 66\u201385."}],"container-title":["ACM Transactions on Architecture and Code Optimization"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3631526","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3631526","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T00:03:53Z","timestamp":1750291433000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3631526"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,12,15]]},"references-count":64,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2024,3,31]]}},"alternative-id":["10.1145\/3631526"],"URL":"https:\/\/doi.org\/10.1145\/3631526","relation":{},"ISSN":["1544-3566","1544-3973"],"issn-type":[{"type":"print","value":"1544-3566"},{"type":"electronic","value":"1544-3973"}],"subject":[],"published":{"date-parts":[[2023,12,15]]},"assertion":[{"value":"2023-05-05","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2023-10-24","order":1,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2023-12-15","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}