loading...
 This Article 
   
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
22nd Annual Computer Security Applications Conference (ACSAC'06)
Extended Protection against Stack Smashing Attacks without Performance Loss
Miami Beach, Florida, USA
December 11-December 15
ISBN: 0-7695-2716-7
Yves Younan, Katholieke Universiteit Leuven, Belgium
Davide Pozza, Politecnico di Torino, Italy
Frank Piessens, Katholieke Universiteit Leuven, Belgium
Wouter Joosen, Katholieke Universiteit Leuven, Belgium
In this paper we present an efficient countermeasure against stack smashing attacks. Our countermeasure does not rely on secret values (such as canaries) and protects against attacks that are not addressed by state-of-the-art countermeasures. Our technique splits the standard stack into multiple stacks. The allocation of data types to one of the stacks is based on the chances that a specific data element is either a target of attacks and/or an attack vector. We have implemented our solution in a C-compiler for Linux. The evaluation shows that the overhead of using our counter-measure is negligible.
Citation:
Yves Younan, Davide Pozza, Frank Piessens, Wouter Joosen, "Extended Protection against Stack Smashing Attacks without Performance Loss," acsac, pp.429-438, 22nd Annual Computer Security Applications Conference (ACSAC'06), 2006
Usage of this product signifies your acceptance of the Terms of Use.