Caroline Tice

Caroline Tice is a Senior Software Engineer at Google, where she works on developer tools (especially compiler and debugger support) for Chrome/ChromeOS. She came to Google in 2011 from the Developer Tools group at Apple. Prior to that she was a member of the research staff at the DEC/Compaq/HP Systems Research Center. She has a B.S. in Computer Science from the College of William and Mary, and an M.S. and Ph.D in Computer Science from the University of California, Berkeley.
Authored Publications
Google Publications
Other Publications
Sort By
  • Title
  • Title, descending
  • Year
  • Year, descending
    Enforcing Forward-Edge Control-Flow Integrity in GCC & LLVM
    Tom Roeder
    Stephen Checkoway
    Úlfar Erlingsson
    Luis Lozano
    Geoff Pike
    Proceedings of the 23rd Usenix Security Symposium, USENIX, San Diego, CA(2014)
    Preview abstract Constraining dynamic control transfers is a common technique for mitigating software vulnerabilities. This defense has been widely and successfully used to protect return addresses and stack data; hence, current attacks instead typically corrupt vtable and function pointers to subvert a forward edge (an indirect jump or call) in the control-flow graph. Forward edges can be protected using Control-Flow Integrity (CFI) but, to date, CFI implementations have been research prototypes, based on impractical assumptions or ad hoc, heuristic techniques. To be widely adoptable, CFI mechanisms must be integrated into production compilers and be compatible with software-engineering aspects such as incremental compilation and dynamic libraries. This paper presents implementations of fine-grained, forward-edge CFI enforcement and analysis for GCC and LLVM that meet the above requirements. An analysis and evaluation of the security, performance, and resource consumption of these mechanisms applied to the SPEC CPU2006 benchmarks and common benchmarks for the Chromium web browser show the practicality of our approach: these fine-grained CFI mechanisms have significantly lower overhead than recent academic CFI prototypes. Implementing CFI in industrial compiler frameworks has also led to insights into design tradeoffs and practical challenges, such as dynamic loading. View details
    Cache Aware Data Layout Reorganization Optimization in GCC
    Mostafa Hagog
    Proceedings of the GCC Summit, 2005, pp. 69-92
    A Practical, Robust Method for Generating Variable Range Tables
    Susan Graham
    Proceedings of the 10th International Conference on Compiler Construction 2001, Springer-Verlag, pp. 102-117
    Key Instructions: Solving the Code Location Problem for Optimized Code, SRC Research Report 164
    Susan Graham
    Compaq Systems Research Center(2000)
    A Practical Approach for Recovery of Evicted Variables, SRC Research Report 167
    Susan Graham
    Compaq Systems Research Center(2000)
    OPTVIEW: A New Approach for Examining Optimized Code
    Susan Graham
    Proceedings of the ACM SIGPLAN Workshop on Program Analysis for Software Tools and Engineering(1998), pp. 19-26