Code-reuse attacks and defenses

This dissertation presents a generic and fine-grained CFI framework for mobile devices targeting ARM-based platforms and explores a new return-oriented programming attack technique that is solely based on indirect jump and call instructions to evade detection from defenses that perform integrity checks for return addresses.