Towards a Policy-Agnostic Control-Flow Integrity Implementation
Control-flow integrity (CFI) is a general defense against code-reuse attacks. In theory, a CFI implementation mitigates control-flow hijacking by verifying that the control-flow transfer follows its legitimate path. However, CFI and its current implementations suffer from deficiencies with regard to either security or practicality
by Ahmad-Reza Sadeghi, Dean Sullivan, Orlando Arias, Yier Jin
Full Abstract: https://www.blackhat.com/eu-16/briefi...
