When good instructions go bad: generalizing return-oriented programming to RISC. - Erik Buchanan; Ryan Roemer; Hovav Shacham; Stefan Savage (CCS, 2008)

Return-Oriented Programming: Systems, Languages, and Applications. - Ryan Roemer; Erik Buchanan; Hovav Shacham; Stefan Savage (ACM Trans. Inf. Syst. Secur., 2012)