Sixth International Conference on Parallel and Distributed Computing Applications and Technologies (PDCAT'05) A Segment-based Approach of Defending Against Buffer Overflow Attacks Dalian, China December 05-December 08 ISBN: 0-7695-2405-2
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/PDCAT.2005.47
Buffer overflows remain the leading cause of software vulnerabilities in the world of information security. The proposed segment-based non-executable stack approach aims to prevent the injection and execution of arbitrary code in an existing process's stack space under Windows NT/2000 and Intel 32-bit CPUs. The application's user-mode stack is relocated to the higher address and the effective limit of the code segment excludes the relocated stack from the code segment. The segmentation logic of IA-32 processors monitors the accesses to the memory ranges and a page fault is generated if instruction fetches are initiated in the stack memory pages. It is highly effective in preventing both known and yet unknown stack smashing attacks.
Citation:
Yu-an Tan, Ji-yan Zheng, Yuan-da Cao, "A Segment-based Approach of Defending Against Buffer Overflow Attacks," pdcat, pp.430-433, Sixth International Conference on Parallel and Distributed Computing Applications and Technologies (PDCAT'05), 2005 Usage of this product signifies your acceptance of the Terms of Use. | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||