Everything about Control-flow integrity

🧭 Start here: a 6-step reading path

1. Read the overview: Control-flow integrityA 5-minute orientation
2. Skim a recent paper: Survey of Control-flow Integrity Techniques for Real-time Embedded SystemsInfluential work since 2022
3. Pick up a classic book: Resolution Trust CorporationThe most-reprinted book on the subject
4. Read the landmark paper: Control-flow integrity principles, implementations, and applicationsCited 554 times
5. Go sideways: Code sanitizerA closely related topic
6. Go sideways: Buffer overflow protectionA closely related topic

🏆 Landmark papers (most cited)

• Control-flow integrity principles, implementations, and applications

  Martín Abadi, Mihai Budiu, Úlfar Erlingsson · 2009 · ACM Transactions on Information and System Security · 554 citations

• Control-Flow Integrity

  Nathan Burow, Scott A. Carr, Joseph Nash · 2017 · ACM Computing Surveys · 202 citations

• A Fine-Grained Control Flow Integrity Approach Against Runtime Memory Attacks for Embedded Systems

  Sanjeev Das, Wei Zhang, Yang Liu · 2016 · IEEE Transactions on Very Large Scale Integration (VLSI) Systems · 54 citations

• Modular control-flow integrity

  Ben Niu, Gang Tan · 2014 · ACM SIGPLAN Notices · 51 citations

• HCIC: Hardware-Assisted Control-Flow Integrity Checking

  Jiliang Zhang, Binhang Qi, Zheng Qin · 2019 · IEEE Internet of Things Journal · 51 citations

• SOFIA: Software and control flow integrity architecture

  Ruan de Clercq, Johannes Götzfried, David Übler · 2017 · Computers & Security · 40 citations

• Fine-CFI: Fine-Grained Control-Flow Integrity for Operating System Kernels

  Jinku Li, Xiaomeng Tong, Fengwei Zhang · 2018 · IEEE Transactions on Information Forensics and Security · 39 citations

• Control Flow Integrity Based on Lightweight Encryption Architecture

  Pengfei Qiu, Yongqiang Lyu, Jiliang Zhang · 2018 · IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems · 33 citations

🆕 Influential since 2022

• Survey of Control-flow Integrity Techniques for Real-time Embedded Systems

  Tanmaya Mishra, Thidapat Chantem, Ryan Gerdes · 2022 · ACM Transactions on Embedded Computing Systems · 16 citations

• FH-CFI: Fine-grained hardware-assisted control flow integrity for ARM-based IoT devices

  Anmin Fu, Weijia Ding, Boyu Kuang · 2022 · Computers & Security · 15 citations

• Bratter: An Instruction Set Extension for Forward Control-Flow Integrity in RISC-V

  Seonghwan Park, Dongwook Kang, Jeonghwan Kang · 2022 · Sensors · 12 citations

• A Hardware Security-Monitoring Architecture Based on Data Integrity and Control Flow Integrity for Embedded Systems

  Qiang Hao, Zhun Zhang, Dongdong Xu · 2022 · Applied Sciences · 7 citations

• Hardware-assisted mechanisms to enforce control flow integrity: A comprehensive survey

  Sandeep Kumar, Diksha Moolchandani, Smruti R. Sarangi · 2022 · Journal of Systems Architecture · 7 citations

📚 Books worth reading

• 📕Resolution Trust CorporationUnited States. General Accounting Office · 1990
• Software EngineeringRoger S. Pressman, Bruce Maxim · 1982
• Computer NetworksAndrew S. Tanenbaum, John David Wetherall · 1981
• Computer networkingJames F. Kurose, Keith W. Ross · 1900
• Neural Information ProcessingTingwen Huang · 2012
• Hypertension in PregnancyPeter C. Rubin · 1983
• The web application hacker's handbookDafydd Stuttard, Marcus Pinto · 2007
• Mobile Networks and ManagementAndreas Timm-Giel · 2013

Ranked by number of editions on Open Library, a rough measure of how lasting a book is.

🔗 Related topics

• Code sanitizer A code sanitizer is a programming tool that detects bugs in the form of undefined or suspicious behavior by a compiler inserting instrumentation code at…
• Buffer overflow protection Buffer overflow protection is any of various techniques used during software development to enhance the security of executable programs by detecting buffer…
• Return-oriented programming Return-oriented programming (ROP) is a computer security exploit technique that allows an attacker to execute code despite the presence of security defenses…
• X86 calling conventions This article describes the calling conventions used when programming x86 architecture microprocessors. Calling conventions describe the interface of called…
• Buffer overflow In programming and information security, a buffer overflow or buffer overrun is a bug whereby a program writes data to a buffer beyond the buffer's allocated…
• Microsoft-specific exception handling mechanisms The Microsoft Windows family of operating systems employ some specific exception handling mechanisms. Microsoft Structured Exception Handling is the native…
• Blocks (C language extension) Blocks are a non-standard extension added by Apple Inc. to the C, C++, and Objective-C programming languages that uses a lambda expression-like syntax…
• Inline assembler In computer programming, an inline assembler is a feature of some compilers that allows low-level code written in assembly language to be embedded within…