Automated Multi architectural Discovery of CFI Resistant Code Gadgets
Memory corruption vulnerabilities are still a severe threat for software systems. To thwart the exploitation of such vulnerabilities, many different kinds of defenses have been proposed in the past. Most prominently, Control Flow Integrity (CFI) has received a lot of attention recently. Several proposals were published that apply coarse grained policies with a low performance overhead. However, their security remains questionable as recent attacks have shown.
ESORICS