Concept
Arbitrary code execution
Related publications (10)
Performance Contracts for Software Network Functions
George Candea, Solal Vincenzo Pirelli, Arseniy Zaostrovnykh, Rishabh Ramesh Iyer, Luis David Figueiredo Mascarenhas Moreira Pedrosa
Software network functions (NFs), or middleboxes, promise flexibility and easy deployment of network services but face the serious challenge of unexpected performance behaviour. We propose the notion of a performance contract, a construct formulated in ter ...
USENIX ASSOC2019Block Oriented Programming: Automating Data-Only Attacks
With the widespread deployment of Control-Flow Integrity (CFI), control-flow hijacking attacks, and consequently code reuse attacks, are significantly more difficult. CFI limits control flow to well-known locations, severely restricting arbitrary code exec ...
ASSOC COMPUTING MACHINERY2018Unified prefetching into instruction cache and branch target buffer
Babak Falsafi, Boris Robert Grot, Ilknur Cansu Kaynak
A system and method of coupling a Branch Target Buffer (BTB) content of a BTB with an instruction cache content of an instruction cache. The method includes: tagging a plurality of target buffer entries that belong to branches within a same instruction blo ...
2017On verifying causal consistency
Causal consistency is one of the most adopted consistency criteria for distributed implementations of data structures. It ensures that operations are executed at all sites according to their causal precedence. We address the issue of verifying automaticall ...
ACM New York, NY, USA ©20172017On Verifying Causal Consistency
Causal consistency is one of the most adopted consistency criteria for distributed implementations of data structures. It ensures that operations are executed at all sites according to their causal precedence. We address the issue of verifying automaticall ...
2016Automatic generation of program execution that reaches a given failure point
George Candea, Cristian Zamfir
An execution of a target software program that causes a particular bug to manifest itself is generated. A target software program is received. A bug report generated by an execution of the target software program is received. The bug report describes a par ...
2015Confluence: unified instruction supply for scale-out servers
Babak Falsafi, Boris Robert Grot, Ilknur Cansu Kaynak
Multi-megabyte instruction working sets of server workloads defy the capacities of latency-critical instruction-supply components of a core; the instruction cache (L1-I) and the branch target buffer (BTB). Recent work has proposed dedicated prefetching tec ...
ACM Press2015