5 papers
CFIghter: Automated Control-Flow Integrity Enablement and Evaluation for Legacy C/C++ Systems
Sabine Houy, Bruno Kreyssig, Alexandre Bartel
Compiler-based Control-Flow Integrity (CFI) offers strong forward-edge protection but remains challenging to deploy in large C/C++ software due to visibility mismatches, type incon…
A Practical Guideline and Taxonomy to LLVM's Control Flow Integrity
Sabine Houy, Bruno Kreyssig, Timothee Riom +2
Memory corruption vulnerabilities remain one of the most severe threats to software security. They often allow attackers to achieve arbitrary code execution by redirecting a vulner…
Sleeping Giants -- Activating Dormant Java Deserialization Gadget Chains through Stealthy Code Changes
Bruno Kreyssig, Sabine Houy, Timothée Riom +1
Java deserialization gadget chains are a well-researched critical software weakness. The vast majority of known gadget chains rely on gadgets from software dependencies. Furthermor…
In the Magma chamber: Update and challenges in ground-truth vulnerabilities revival for automatic input generator comparison
Timothée Riom, Sabine Houy, Bruno Kreyssig +1
Fuzzing is a well-established technique for detecting bugs and vulnerabilities. With the surge of fuzzers and fuzzer platforms being developed such as AFL and OSSFuzz rises the nec…
Deserialization Gadget Chains are not a Pathological Problem in Android:an In-Depth Study of Java Gadget Chains in AOSP
Bruno Kreyssig, Timothée Riom, Sabine Houy +2
Inter-app communication is a mandatory and security-critical functionality of operating systems, such as Android. On the application level, Android implements this facility through…