Abstract:Buffer overflow is one of the most common types of software vulnerabilities. Various static analysis and dynamic testing techniques have been proposed to detect buffer overflow vulnerabilities. With automatic tool support, static buffer overflow detection technique has been widely used in academia and industry. However, it tends to report too many false positives fundamentally due to the lack of software execution information. Currently, static warnings can only be validated by manual inspection, which significantly limits the practicality of the static analysis. In this paper, we present BovInspector, a tool framework for automatic static buffer overflow warnings inspection and validated bugs repair. Given the program source code and static buffer overflow vulnerability warnings, BovInspector first performs warning reachability analysis. Then, BovInspector executes the source code symbolically under the guidance of reachable warnings. Each reachable warning is validated and classified by checking whether all the path conditions and the buffer overflow constraints can be satisfied simultaneously. For each validated true warning, BovInspector fix it with three predefined strategies. BovInspector is complementary to prior static buffer overflow discovery schemes. Experimental results on real open source programs show that BovInspector can automatically inspect on average of 74.9% of total warnings, and false warnings account for about 25% to 100% (on average of 59.9%) of the total inspected warnings. In addition, the automatically generated patches fix all target vulnerabilities. Further information regarding the implementation and experimental results of BovInspector is available at http://bovinspectortool.github.io/project/. And a short video for demonstrating the capabilities of BovInspector is now available at https://youtu.be/IMdcksROJDg.

Method of Preventing Buffer Overflow Attacks by Intercepting DLL Functions

Detecting heap smashing attacks through fault containment wrappers

Buffer Overflow Attacks Analysis and Real-time Detection

Defense Buffer Overflow in Code Writing

HeapTherapy: An Efficient End-to-End Solution against Heap Buffer Overflows

LibsafeXP: A Practical and Transparent Tool for Run-time Buffer Overflow Preventions

Research on Principle and Defense of Buffer Overflow Attacks

Analysis of Compiler Technology Enhancement ror Buffer Overflow Prevention

A New Data Randomization Method to Defend Buffer Overflow Attacks

Intercept and Cleanup Message Hooks in Windows Operating System

An Empirical Study on Detecting and Fixing Buffer Overflow Bugs

Method of integer overflow detection to avoid buffer overflow

Technology to Prevent Buffer Overflow Attacks Based on CPU Hardware

Heap Taichi: exploiting memory allocation granularity in heap-spraying attacks

Test and analysis of WehnTrust's intrusion prevention performance

Research on Machine-Code Level Injection and HOOK Technique

Progress in Research on Buffer Overflow Vulnerability Analysis Technologies

SafeBird:A Dynamic and Transparent Toolkit for Run-Time Buffer Overflow Preventions

An Implementation of Windows System Call Interception Used For Access Control

BovInspector: Automatic Inspection and Repair of Buffer Overflow Vulnerabilities.

S3Library: Automatically Eliminating C/C++ Buffer Overflow using Compatible Safer Libraries