Erik Buchanan Ryan Roemer Hovav Shacham Stefan Savage When good instructions go bad: generalizing return-oriented programming to RISC. 27-38 2008 ACM Conference on Computer and Communications Security http://doi.acm.org/10.1145/1455770.1455776 conf/ccs/2008 db/conf/ccs/ccs2008.html#BuchananRSS08