Software exploitation has been proven to be a lucrative business for cybercriminals.
Unfortunately, protecting software against attacks is a long-lasting endeavor that is still …

We are witnessing a rapid escalation in targeted cyber-attacks called Advanced and
Persistent Threats (APTs). Carried out by skilled adversaries, these attacks take place over …

With growing hardware complexity and ever-evolving user requirements, the kernel is
increasingly bloated which increases its attack surface. Despite its large size, for specific …

Memory safety bugs continue to be a major source of security vulnerabilities in our critical
infrastructure. The CHERI project has proposed extending conventional architectures with …

Programs written in C/C++ are vulnerable to memory-safety errors like buffer-overflows and
use-after-free. While several mechanisms to detect such errors have been previously …

Code reuse attacks (CRAs), such as return-oriented programming (ROP) and jump-oriented
programming (JOP) attacks, have become a great threat to the runtime security of ARM …

Deletion is a core facet of Online Social Networks (OSNs). For users, deletion is a tool to
remove what they have shared and control their data. For OSNs, robust deletion is both an …

Recent code reuse attacks are able to circumvent various address space layout
randomization (ASLR) techniques by exploiting memory disclosure vulnerabilities. To …

Moving Target Defenses (MTD) have become a popular and emerging defense strategy for
the protection of traditional information technology systems. By their very nature, MTD …

In this paper we present a hardware based solution to verify simultaneously Code and
Control-Flow Integrity (CCFI), aiming at protecting microcontrollers against both cyber-and …