Buffer overflows: attacks and defenses for the vulnerability of thedecade
Cowan, C.; Wagle, F.; Calton Pu; Beattie, S.; Walpole, J.
DARPA Information Survivability Conference and Exposition, 2000. DISCEX apos;00. Proceedings
Volume 2, Issue , 2000 Page(s):119 - 129 vol.2
Digital Object Identifier 10.1109/DISCEX.2000.821514
Summary:Buffer overflows have been the most common form of security
vulnerability for the last ten years. Moreover, buffer overflow
vulnerabilities dominate the area of remote network penetration
vulnerabilities, where an anonymous Internet user seeks to gain partial
or total control of a host. If buffer overflow vulnerabilities could be
effectively eliminated, a very large portion of the most serious
security threats would also be eliminated. We survey the various types
of buffer overflow vulnerabilities and attacks and survey the various
defensive measures that mitigate buffer overflow vulnerabilities,
including our own StackGuard method. We then consider which combinations
of techniques can eliminate the problem of buffer overflow
vulnerabilities, while preserving the functionality and performance of
existing systems
View citation and abstract |
Cart
