|
| This Article | ||
| ||
| Share | ||
| Bibliographic References | ||
| Add to: | ||
 Digg  Furl  Spurl  Blink  Simpy  Google  Del.icio.us  Y!MyWeb | ||
| Search | ||
| ||
Beyond Stack Smashing: Recent Advances in Exploiting Buffer Overruns
July-August 2004 (vol. 2 no. 4)
pp. 20-27
| ASCII Text | x | ||
| Jonathan Pincus , Brandon Baker, "Beyond Stack Smashing: Recent Advances in Exploiting Buffer Overruns," IEEE Security & Privacy, vol. 2, no. 4, pp. 20-27, July-August, 2004. | |||
| BibTex | x | ||
| @article{ 10.1109/MSP.2004.36, author = {Jonathan Pincus and Brandon Baker}, title = {Beyond Stack Smashing: Recent Advances in Exploiting Buffer Overruns}, journal ={IEEE Security & Privacy}, volume = {2}, number = {4}, issn = {1540-7993}, year = {2004}, pages = {20-27}, doi = {http://doi.ieeecomputersociety.org/10.1109/MSP.2004.36}, publisher = {IEEE Computer Society}, address = {Los Alamitos, CA, USA}, } | |||
| RefWorks Procite/RefMan/Endnote | x | ||
| TY - MGZN JO - IEEE Security & Privacy TI - Beyond Stack Smashing: Recent Advances in Exploiting Buffer Overruns IS - 4 SN - 1540-7993 SP20 EP27 EPD - 20-27 A1 - Jonathan Pincus , A1 - Brandon Baker, PY - 2004 KW - stack smashing KW - buffer overruns KW - attacking systems KW - arc injection KW - pointer subterfuge KW - heap smashing VL - 2 JA - IEEE Security & Privacy ER - | |||
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/MSP.2004.36
This article describes three powerful general-purpose families of exploits for buffer overruns: arc injection, pointer subterfuge, and heap smashing. These new techniques go beyond the traditional "stack smashing" attack and invalidate traditional assumptions about buffer overruns.
Index Terms:
stack smashing, buffer overruns, attacking systems, arc injection, pointer subterfuge, heap smashing
Citation:
Jonathan Pincus , Brandon Baker, "Beyond Stack Smashing: Recent Advances in Exploiting Buffer Overruns," IEEE Security & Privacy, vol. 2, no. 4, pp. 20-27, July-Aug. 2004, doi:10.1109/MSP.2004.36
Usage of this product signifies your acceptance of the Terms of Use.