loading...
 This Article 
   
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
Sixth International Conference on Parallel and Distributed Computing Applications and Technologies (PDCAT'05)
A Segment-based Approach of Defending Against Buffer Overflow Attacks
Dalian, China
December 05-December 08
ISBN: 0-7695-2405-2
Yu-an Tan, Beijing Institute of Technology, China
Ji-yan Zheng, Beijing Institute of Technology, China
Yuan-da Cao, Beijing Institute of Technology, China
Buffer overflows remain the leading cause of software vulnerabilities in the world of information security. The proposed segment-based non-executable stack approach aims to prevent the injection and execution of arbitrary code in an existing process's stack space under Windows NT/2000 and Intel 32-bit CPUs. The application's user-mode stack is relocated to the higher address and the effective limit of the code segment excludes the relocated stack from the code segment. The segmentation logic of IA-32 processors monitors the accesses to the memory ranges and a page fault is generated if instruction fetches are initiated in the stack memory pages. It is highly effective in preventing both known and yet unknown stack smashing attacks.
Citation:
Yu-an Tan, Ji-yan Zheng, Yuan-da Cao, "A Segment-based Approach of Defending Against Buffer Overflow Attacks," pdcat, pp.430-433, Sixth International Conference on Parallel and Distributed Computing Applications and Technologies (PDCAT'05), 2005
Usage of this product signifies your acceptance of the Terms of Use.