Abstract:Buffer overflow is one of the most common types of software security vulnerabilities. Although researchers have proposed various static and dynamic techniques for buffer overflow detection, buffer overflow attacks against both legacy and newly-deployed software systems are still quite prevalent. Compared with dynamic detection techniques, static techniques are more systematic and scalable. However, there are few studies on the effectiveness of state-of-the-art static buffer overflow detection techniques. In this paper, we perform an in-depth quantitative and qualitative study on static buffer overflow detection. More specifically, we obtain both the buggy and fixed versions of 100 buffer overflow bugs from 63 real-world projects totalling 28 MLoC (Millions of Lines of Code) based on the reports in Common Vulnerabilities and Exposures (CVE). Then, quantitatively, we apply Fortify, Checkmarx, and Splint to all the buggy versions to investigate their false negatives, and also apply them to all the fixed versions to investigate their false positives. We also qualitatively investigate the causes for the false-negatives and false-positives of studied techniques to guide the design and implementation of more advanced buffer overflow detection techniques. Finally, we also categorized the patterns of manual buffer overflow repair actions to guide automated repair techniques for buffer overflow. The experiment data is available at http://bo-study.github.io/Buffer-Overflow-Cases/.

Study on Buffer Overflow Attack and Detection Method

Analysis and Study of Buffer Overflow Attack Detection Technology

Study on Buffer Overflow Attack and New Protection Method

Buffer Overflow Attacks Analysis and Real-time Detection

Research on Principle and Defense of Buffer Overflow Attacks

Analysis of Buffer Overflow Attack Based on State Graph

Progress in Research on Buffer Overflow Vulnerability Analysis Technologies

Defense Buffer Overflow in Code Writing

An Approach to Buffer Overflow Detection Based on Memory Address Confirmation

An Empirical Study on Detecting and Fixing Buffer Overflow Bugs

Research on Detection of Vulnerability-Exploiting Technology Heap Spray

Analysis and Realization of Network Attack of Overflow Vulnerability

Analysis and Using of Buffer OverFlow on Linux System

Research of Log Overflow Protection Based on Bitmap

Buffer Overflow Protection Mechanism and Bypass Technology under Windows

Buffer Overflow Attacks On Linux Principles Analyzing And Protection

Test and analysis of WehnTrust's intrusion prevention performance

Research for Buffer Overflow Vulnerabilities Based on Multi-Dimensional Fuzzing Technology

A new approach of network buffer overflow detection based on code execution simulation

Detection of buffer overflow by duplication of control flow data

Study on Shellcode Breaking Through Protective Measures