Publications associées à Réutilisation de code

WarpAttack: Bypassing CFI through Compiler-Introduced Double-Fetches

Mathias Josef Payer, Flavio Toffalini, Luca Di Bartolomeo, Jianhao Xu

Code-reuse attacks are dangerous threats that attracted the attention of the security community for years. These attacks aim at corrupting important control-flow transfers for taking control of a process without injecting code. Nowadays, the combinations o ...

IEEE COMPUTER SOC2023

Toward Code Review Notebooks

Denis Gillet, Maria Jesus Rodriguez Triana, Juan Carlos Farah, Sandy Ingram

Peer code review has proven to be a valuable tool in software engineering. However, integrating code reviews into educational contexts is particularly challenging due to the complexity of both the process and popular code review tools. We propose to addres ...

IEEE2022

Concerning the research “Material history of the built environment and the conservation project” (2008–2020), methodology and results

Franz Graf, Giulia Marino

Recent successes in the reuse and rehabilitation of 20th century architecture have shown that design begins with the study of history. Study of the material history of built structures, together with historical and critical investigation, supported by diag ...

CRC Press/Balkema2021

Concerning the research “Material history of the built environment and the conservation project” (2008–2020), methodology and results

Franz Graf, Giulia Marino

Recent successes in the reuse and rehabilitation of 20th century architecture have shown that design begins with the study of history. Study of the material history of built structures, together with historical and critical investigation, supported by diag ...

CRC Press/Balkema - Taylor & Francis2021

SpecROP: Speculative Exploitation of ROP Chains

Mathias Josef Payer, Atri Bhattacharyya, Andrés Sánchez Marín

Speculative execution attacks, such as Spectre, reuse code from the victim’s binary to access and leak secret information during speculative execution. Every variant of the attack requires very particular code sequences, necessitating elaborate gadget-sear ...

2020

Increasing reuse in learning objects authoring: a case study with the Cacuria tool

Roberto Gerson De Albuquerque Azevedo

Artifacts and best practices reuse as a way of improving educational resources and easing and speeding up the authoring process have been an important theme since the earliest research efforts on Learning Objects (LOs). In such a context, authoring tools t ...

ASSOC COMPUTING MACHINERY2019

Block Oriented Programming: Automating Data-Only Attacks

Mathias Josef Payer

With the widespread deployment of Control-Flow Integrity (CFI), control-flow hijacking attacks, and consequently code reuse attacks, are significantly more difficult. CFI limits control flow to well-known locations, severely restricting arbitrary code exec ...

ASSOC COMPUTING MACHINERY2018

Theory and Practice of Coroutines with Snapshots

Aleksandar Prokopec, Fengyun Liu

While event-driven programming is a widespread model for asynchronous computing, its inherent control flow fragmentation makes event-driven programs notoriously difficult to understand and maintain. Coroutines are a general control flow construct that can ...

2018

Cross-Platform Language Design in Scala.js (Keynote)

Sébastien Jean R Doeraene

Have you ever wondered what is the secret sauce of Scala.js? What defines Scala.js, above all else, is the overarching will to make it cross-platform. A cross-platform language is both portable-most source code cross-compiles and behaves the same way on mu ...

ASSOC COMPUTING MACHINERY2018

Verification by Reduction to Functional Programs

Régis William Blanc

In this thesis, we explore techniques for the development and verification of programs in a high-level, expressive, and safe programming language. Our programs can express problems over unbounded domains and over recursive and mutable data structures. We p ...

EPFL2017