Pp. 81-89 of the Proceedings

Next: Abstract

Type-Assisted Dynamic Buffer Overflow Detection

Kyung-suk Lhee and Steve J. Chapin
Center for Systems Assurance
Syracuse University
{klhee, chapin}@ecs.syr.edu

• Abstract
• Introduction
• Related work
  • StackGuard
  • StackShield
  • Libsafe
  • Solar Designer's non-executable stack patch
  • PaX
  • Runtime array bounds checking
  • Static analysis of array bounds checking
  
  
• Exploitation techniques
  • Return-into-libc
  • Other code pointers
  • Malloc() overflow
  • Indirect overflow via pointer
  
  
• Overview of Our Approach
• Implementation
• Limitations
• Experiments
• Conclusions and future work
• Bibliography
• About this document ...