Share on Facebook Tweet on Twitter Share on LinkedIn Share by email
Control-Flow Integrity

Martín Abadi, Mihai Budiu, Úlfar Erlingsson, and Jay Ligatti


Current software attacks often build on exploits that subvert machine-code execution. The enforcement of a basic safety property, Control-Flow Integrity (CFI), can prevent such attacks from arbitrarily controlling program behavior. CFI enforcement is simple, and its guarantees can be established formally, even with respect to powerful adversaries. Moreover, CFI enforcement is practical: it is compatible with existing software and can be efficiently implemented using software rewriting in commodity systems. Finally, CFI provides a useful foundation for enforcing further security policies, such as policies that constrain the use of data memory.


Publication typeInproceedings
Published inACM Conference on Computer and Communication Security (CCS)
InstitutionMicrosoft Research
AddressAlexandria, VA
> Publications > Control-Flow Integrity