Demonstration venue · read-only. Every page can be browsed; the buttons that would change it are switched off. Create an account to run TaxoReview on your own data. A simulation from public publication records: the people listed were not invited and did not agree to review.
? Tutorial for this page

Robert Bigelow

dblp:265/5819 · DBLP profile ↗
← Back
1ranked-venue papers
0as first author
1since 2021 · last 2021
—ORCID · none

Domains — the database's venue-derived domains; a paper can count in several

Software engineering, systems software and programming languages · 1 · 1 since 2021

Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.

Network and information security
1 paper
Systems and software security · 100%
Software engineering, system software, and programming languages
1 paper
Compilers and program optimization · 77% Program analysis · 23%

Topics — the 4 heaviest of 4, each with the papers that count most for it

TopicWeightPapersLastEvidence papers
Systems and software security › exploitation
code reuse attack
0.512021
Not so fast: understanding and mitigating negative impacts of compiler optimizations on code reuse gadget sets · Proc. ACM Program. Lang. 2021
Systems and software security › exploitation › code reuse attack
return-oriented programming
0.512021
Not so fast: understanding and mitigating negative impacts of compiler optimizations on code reuse gadget sets · Proc. ACM Program. Lang. 2021
Compilers and program optimization
compiler optimization
0.512021
Not so fast: understanding and mitigating negative impacts of compiler optimizations on code reuse gadget sets · Proc. ACM Program. Lang. 2021
Program analysis
binary analysis
0.112021
Not so fast: understanding and mitigating negative impacts of compiler optimizations on code reuse gadget sets · Proc. ACM Program. Lang. 2021

Methods — techniques the papers use, named apart from their topics

differential binary analysis · 1.0binary recompilation · 1.0
YearPublicationVenuePosition
2021 Not so fast: understanding and mitigating negative impacts of compiler optimizations on code reuse gadget sets
abstract
Despite extensive testing and correctness certification of their functional semantics, a number of compiler optimizations have been shown to violate security guarantees implemented in source code. While prior work has shed light on how such optimizations may introduce semantic security weaknesses into programs, there remains a significant knowledge gap concerning the impacts of compiler optimizations on non-semantic properties with security implications. In particular, little is currently known about how code generation and optimization decisions made by the compiler affect the availability and utility of reusable code segments called gadgets required for implementing code reuse attack methods such as return-oriented programming. In this paper, we bridge this gap through a study of the impacts of compiler optimization on code reuse gadget sets. We analyze and compare 1,187 variants of 20 different benchmark programs built with two production compilers (GCC and Clang) to determine how their optimization behaviors affect the code reuse gadget sets present in program variants with respect to both quantitative and qualitative metrics. Our study exposes an important and unexpected problem; compiler optimizations introduce new gadgets at a high rate and produce code containing gadget sets that are generally more useful to an attacker than those in unoptimized code. Using differential binary analysis, we identify several undesirable behaviors at the root of this phenomenon. In turn, we propose and evaluate several strategies to mitigate these behaviors. In particular, we show that post-production binary recompilation can effectively mitigate these behaviors with negligible performance impacts, resulting in optimized code with significantly smaller and less useful gadget sets.
Michael D. Brown, Matthew Pruett, Robert Bigelow, Girish Mururu, Santosh Pande
Proc. ACM Program. Lang.3