Demo Data from VLDB 2026 / reviewers in the wild / expert
Robert Bigelow
dblp:265/5819
· DBLP profile ↗
1ranked-venue papers
0as first author
1since 2021 · last 2021
—ORCID · none
Domains — the database's venue-derived domains; a paper can count in several
Software engineering, systems software and programming languages · 1 · 1 since 2021
Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.
| Network and information security
1 paper |
Systems and software security · 100% | |
| Software engineering, system software, and programming languages
1 paper |
Compilers and program optimization · 77% Program analysis · 23% |
Topics — the 4 heaviest of 4, each with the papers that count most for it
| Topic | Weight | Papers | Last | Evidence papers |
|---|---|---|---|---|
Systems and software security › exploitation
code reuse attack |
0.5 | 1 | 2021 | Not so fast: understanding and mitigating negative impacts of compiler optimizations on code reuse gadget sets · Proc. ACM Program. Lang. 2021 |
Systems and software security › exploitation › code reuse attack
return-oriented programming |
0.5 | 1 | 2021 | Not so fast: understanding and mitigating negative impacts of compiler optimizations on code reuse gadget sets · Proc. ACM Program. Lang. 2021 |
Compilers and program optimization
compiler optimization |
0.5 | 1 | 2021 | Not so fast: understanding and mitigating negative impacts of compiler optimizations on code reuse gadget sets · Proc. ACM Program. Lang. 2021 |
Program analysis
binary analysis |
0.1 | 1 | 2021 | Not so fast: understanding and mitigating negative impacts of compiler optimizations on code reuse gadget sets · Proc. ACM Program. Lang. 2021 |
Methods — techniques the papers use, named apart from their topics
differential binary analysis · 1.0binary recompilation · 1.0
| Year | Publication | Venue | Position |
|---|---|---|---|
| 2021 | Not so fast: understanding and mitigating negative impacts of compiler optimizations on code reuse gadget setsabstractDespite extensive testing and correctness certification of their functional semantics, a number of compiler optimizations have been shown to violate security guarantees implemented in source code. While prior work has shed light on how such optimizations may introduce semantic security weaknesses into programs, there remains a significant knowledge gap concerning the impacts of compiler optimizations on non-semantic properties with security implications. In particular, little is currently known about how code generation and optimization decisions made by the compiler affect the availability and utility of reusable code segments called gadgets required for implementing code reuse attack methods such as return-oriented programming. In this paper, we bridge this gap through a study of the impacts of compiler optimization on code reuse gadget sets. We analyze and compare 1,187 variants of 20 different benchmark programs built with two production compilers (GCC and Clang) to determine how their optimization behaviors affect the code reuse gadget sets present in program variants with respect to both quantitative and qualitative metrics. Our study exposes an important and unexpected problem; compiler optimizations introduce new gadgets at a high rate and produce code containing gadget sets that are generally more useful to an attacker than those in unoptimized code. Using differential binary analysis, we identify several undesirable behaviors at the root of this phenomenon. In turn, we propose and evaluate several strategies to mitigate these behaviors. In particular, we show that post-production binary recompilation can effectively mitigate these behaviors with negligible performance impacts, resulting in optimized code with significantly smaller and less useful gadget sets. Michael D. Brown, Matthew Pruett, Robert Bigelow, Girish Mururu, Santosh Pande |
Proc. ACM Program. Lang. | 3 |