The Community for Technology Leaders
RSS Icon
Subscribe
Issue No.01 - January-March (2006 vol.3)
pp: 78-90
ABSTRACT
Stack smashing is still one of the most popular techniques for computer system attack. In this work, we present an anti-stack-smashing defense technique for Microsoft Windows systems. Our approach works at install-time, and does not rely on having access to the source-code: The user decides when and which executables to vaccinate. Our technique consists of instrumenting a given executable with a mechanism to detect stack smashing attacks. We developed a prototype implementing our technique and verified that it successfully defends against actual exploit code. We then extended our prototype to vaccinate DLLs, multithreaded applications, and DLLs used by multithreaded applications, which present significant additional complications. We present promising performance results measured on SPEC2000 benchmarks: Vaccinated executables were no more than 8 percent slower than their un-vaccinated originals.
INDEX TERMS
Computer security, buffer overflow, instrumentation.
CITATION
Danny Nebenzahl, Mooly Sagiv, Avishai Wool, "Install-Time Vaccination of Windows Executables to Defend against Stack Smashing Attacks", IEEE Transactions on Dependable and Secure Computing, vol.3, no. 1, pp. 78-90, January-March 2006, doi:10.1109/TDSC.2006.14
16 ms
(Ver 2.0)

Marketing Automation Platform Marketing Automation Tool