HeapHopper: Bringing Bounded Model Checking to Heap Implementation Security

KLEE: unassisted and automatic generation of high-coverage tests for complex systems programs

Cristian Cadar, Dawson Engler · Operating Systems Design and Implementation · 2008 · 2.7K citations

Software Maintenance, Engineering, Verification +28

The geometry of innocent flesh on the bone

Hovav Shacham · 2007 · 1.3K citations

Engineering, Compiler Technology, Computer Architecture +24

SOK: (State of) The Art of War: Offensive Techniques in Binary Analysis

Yan Shoshitaishvili, Ruoyu Wang, Christopher Salls et al. · 2016 · 883 citations · Full text

Engineering, Information Security, Software Engineering +20

Unleashing Mayhem on Binary Code

Sang Kil, Thanassis Avgerinos, Alexandre Rebert et al. · 2012 · 515 citations

Engineering, Symbolic Memory, Computer Architecture +18

Smashing the Gadgets: Hindering Return-Oriented Programming Using In-place Code Randomization

Vasilis Pappas, Michalis Polychronakis, Angelos D. Keromytis · 2012 · 319 citations · Full text

Program Checking, Engineering, Information Security +24