The discovery of recent zero-day exploits against Microsoft Word, Adobe Flash Player and Internet Explorer demonstrate that return-oriented programming (ROP) is the most severe threat to software system security. Microsoft’s 2013 Software Vulnerability Exploitation trend report found that 73% of all vulnerabilities are exploited via ROP. The core idea of ROP is to exploit the presence of so-cal...

Return oriented programming (ROP) has recently caught great attention of both academia and industry. It reuses existing binary code instead of injecting its own code and is able to perform arbitrary computation due to its Turing-completeness. Hence, It can successfully bypass state-of-the-art code integrity mechanisms such as NICKLE and SecVisor. In this paper, we present HyperCrop, a hyperviso...

Code reuse attacks such as return oriented programming and jump oriented programming are the most popular exploitation methods among attackers. A large number of practical and non-practical defenses are proposed that differ in their overhead, the source code requirement, detection rate and implementation dependencies. However, a usual aspect among these methods is consideration of the common be...

This paper provides a set of empirical tests of the cross-sectional variation of stock volatility and investablility, where investability is defined as the degree to which a stock is accessible to foreigners. Unlike previous studies, which focus on market volatility and market return, we study the relationship between individual stock return volatility and its investablility. Our findings have ...

Periodic randomization of a computer program’s binary code is an attractive technique for defending against several classes of advanced threats. In this paper we describe a model of attacker-defender interaction in which the defender employs such a technique against an attacker who is actively constructing an exploit using Return Oriented Programming (ROP). In order to successfully build a work...

Optimization of international securitized real estate portfolios has been a key topic for several decades. However, most previous analysis has focused on regional diversification by applying the traditional mean-variance (MV) framework suggested by Markowitz (1952) even if the limitations of this approach are well-known. Thus, we focus on a more suitable and appealing downside risk (DR) framewo...