CFI

Definitions

1. Short for control-flow integrity, a class of defenses that restrict program execution to valid control-flow paths so attackers cannot easily redirect execution to unintended code. CFI raises the cost of exploitation for many memory-corruption bugs.

   In plain English: A defense that tries to stop attackers from hijacking where a program executes next.

   Example: "The hardened build enabled CFI to make return-oriented exploitation much harder."

Related Terms

• Buffer Overflow
• Address Space Layout Randomization
• Boundary Check
• Guard Page
• Stack Canary
• Binary Hardening
• Control Flow Guard
• Control Flow Integrity
• Memory Protection