Abstract:AbstractBuffer overflow attacks still pose a significant threat to the security and availability of today's computer systems. Although there are a number of solutions proposed to provide adequate protection against buffer overflow attacks, most of existing solutions terminate the vulnerable program when the buffer overflow occurs, effectively rendering the program unavailable. The impact on availability is a serious problem on service-oriented platforms. This paper presents SafeStack, a system that can automatically diagnose and patch stack-based buffer overflow vulnerabilities. The key technique of our solution is to virtualize memory accesses and move the vulnerable buffer into protected memory regions, which provides a fundamental and effective protection against recurrence of the same attack without stopping normal system execution. We developed a prototype on a Linux system, and conducted extensive experiments to evaluate the effectiveness and performance of the system using a range of applications. Our experimental results showed that SafeStack can quickly generate runtime patches to successfully handle the attack's recurrence. Furthermore, SafeStack only incurs acceptable overhead for the patched applications.

Dynamic Stack Buffer-overflow Prevention Based on Return-address Translation

Stack Buffer Overflow Prevention Based on Dual-stack

Dynamic Buffer Overflow Prevention Based on K Circular Random Sequence

A Segment-based Approach of Defending Against Buffer Overflow Attacks

SafeStack: Automatically Patching Stack-Based Buffer Overflow Vulnerabilities

Buffer Overflow Attacks Defending Using A Segment-Based Approach

Buffer Overflow Protection Based on Segment Limitation

A Static Recognition Mechanism For Indirect Call Based On Static Single Assignment

Buffer overflow protection based on adjusting code segment limit

An Enhancement of Return Address Stack for Security

To Detect Stack Buffer Overflow with Polymorphic Canaries

Detection of buffer overflow by duplication of control flow data

Prevention of Code Reuse Attacks through Return Address Protection

Protection of Stack Data Based on LLVM

Offensive and Defensive Countermeasure Technology of Return-Oriented Programming

Runtime Code Reuse Attacks: A Dynamic Framework Bypassing Fine-Grained Address Space Layout Randomization.

Dynamic Detection of Buffer-overflow Vulnerabilities in Binary Environment

Study of a Hardware Defense Mechanism to Against Buffer Overflow Attacks for Embedded Systems

A Kernel Stack Protection Model Against Attacks from Kernel Execution Units

Dynamic Binary Instrumentation Based Defense Solution Against Virtual Function Table Hijacking Attacks at C++ Binary Programs.

Analysis of Compiler Technology Enhancement ror Buffer Overflow Prevention