loading...
Run-time Detection of Buffer Overflow Attacks without Explicit Sensor Data Objects
Las Vegas, Nevada April 05-April 07
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/ITCC.2004.1286425International Conference on Informati ...
 This Article 
 
PDF
HTML
 
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
Changwoo Pyo, Hongik University, Korea
Byungchul Bae, National Security Research Institute, Korea
Taejin Kim, University of Illinois at Chicago
Gyungho Lee, University of Illinois at Chicago
This paper presents two schemes for detecting buffer overflow attacks at run-time. One is sensor embedding, which hides sensor data objects inside code pointers, and the other, stack frame inversion checking, which detects attacks by inspecting processor registers. Our methods make it difficult for attackers to guess the locations of sensors so that they cannot easily bypass sensors when they attempt to access code pointers. We have implemented the schemes by extending the GCC toolchain. Experimental data shows that our schemes provide programs with powerful detection and protection capabilities at the reasonable sacrifice of execution efficiency. Operating systems would improve on the defense against buffer overflow attacks by using our toolchain when they are built.
Citation:
Changwoo Pyo, Byungchul Bae, Taejin Kim, Gyungho Lee, "Run-time Detection of Buffer Overflow Attacks without Explicit Sensor Data Objects," itcc, vol. 1, pp.50, International Conference on Information Technology: Coding and Computing (ITCC'04) Volume 1, 2004
Usage of this product signifies your acceptance of the Terms of Use.


Suggestions