A dynamic mechanism for recovering from buffer overflow attacks

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 3650 LNCS, Issue , 2005, Pages 1-15

  Sidiroglou, Stelios ^a   Giovanidis, Giannis ^a   Keromytis, Angelos D ^a  

^a Columbia University ^*  (United States)

Author keywords

[No Author keywords available]

Indexed keywords

BENCHMARKING; BUFFER STORAGE; COSTS; SECURITY OF DATA; SERVERS;

BUFFER OVERFLOW; HEAP-BASED BUFFER; HUMAN INTERVENTION;

DYNAMICS;

EID: 33645970172     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/11556992_1     Document Type: Conference Paper

References (28)

1. Wagner, D., Foster, J.S., Brewer, E.A., Aiken, A.: A First Step towards Automated Detection of Buffer Overrun Vulnerabilities. In: Network and Distributed System Security Symposium. (2000) 3-17
2. Aleph One: Smashing the stack for fun and profit. Phrack 7 (1996)
3. Pincus, J., Baker, B.: Beyond Stack Smashing: Recent Advances in Exploiting Buffer Overflows. IEEE Security & Privacy 2 (2004) 20-27
4. Arce, I.: The Shellcode Generation. IEEE Security & Privacy 2 (2004) 72-76
5. th USENIX Security Symposium. (1998)
6. Garber, L.: New Chips Stop Buffer Overflow Attacks. IEEE Computer 37 (2004) 28
7. Rudys, A., Wallach, D.S.: Transactional Rollback for Language-Based Systems. In: ISOC Symposium on Network and Distributed Systems Security (SNDSS). (2001)
8. Rudys, A., Wallach, D.S.: Termination in Language-based Systems. ACM Transactions on Information and System Security 5 (2002)
9. Sidiroglou, S., Keromytis, A.D.: A Network Worm Vaccine Architecture. In: Proceedings of the IEEE Workshop on Enterprise Technologies: Infrastructure for Collaborative Enterprises (WETICE), Workshop on Enterprise Security. (2003) 220-225
10. Sidiroglou, S., Keromytis, A.D.: Countering Network Worms Through Automatic Patch Generation. IEEE Security & Privacy (2005) (to appear).
11. th USENIX Security Symposium. (2004) 1-14
12. th International Symposiun on Recent Advanced in Intrusion Detection (RAID). (2004) 188-202
13. Necula, G.G., McPeak, S., Weimer, W.: CCured: Type-Safe Retrofitting of Legacy Code. In: Proceedings of the Principles of Programming Languages (PoPL). (2002)
14. J.R. Cordy, T.R. Dean, A.M., Schneider, K.: Source Transformation in Software Engineering using the TXL Transformation System. Journal of Information and Software Technology 44 (2002) 827-837
15. th ISOC Symposium on Network and Distributed Systems Security (SNDSS). (2005) 265-278
16. Demsky, B., Rinard, M.C.: Automatic Detection and Repair of Errors in Data Structures. In: Proceedings of the 18th Annual ACM S1GPLAN Conference on Object-Oriented Programming, Systems, Languages, and Application (OOPSLA). (2003)
17. Candea, G., Fox, A.: Recursive restartability: Turning the reboot sledgehammer into a scalpel. In: Proceedings of the 8th Workshop on Hot Topics in Operating Systems (HotOS-VIII), Schloss Elman, Germany, IEEE Computer Society (2001) 110-115
18. Candea, G., Fox, A.: Crash-only software. In: Proceedings of the 9th Workshop on Hot Topics in Operating Systems. (2003)
19. Shannon, C., Moore, D.: The Spread of the Witty Worm. IEEE Security & Privacy 2 (2004) 46-50
20. Levy, E.: Crossover: Online Pests Plaguing the Offline World. IEEE Security & Privacy 1 (2003) 71-73
21. Ször, P., Ferrie, P.: Hunting for Metamorphic. Technical report, Symantec Corporation (2003)
22. Christodorescu, M., Jha, S.: Static Analysis of Executables to Detect Malicious Patterns. In: Proceedings of the 12th USENIX Security Symposium. (2003) 169-186
23. Pasupulati, A., Coit, J., Levitt, K., Wu, S., Li, S., Kuo, J., Fan, K.: Buttercup: On Network-based Detection of Polymorphic Buffer Overflow Vulnerabilities. In: Proceedings of the Network Operations and Management Symposium (NOMS). (2004) 235-248, vol. 1
24. th USENIX Security Symposium. (2004) 29-44
25. th International Symposium on Recent Advances in Intrusion Detection (RAID). (2004) 146-165
26. th Annual Computer Security Applications Conference (ACSAC). (2004)
27. th Symposium on Operating Systems Design and Implementation (OSDI). (2004)
28. Sidiroglou, S., Keromytis, A.: Countering network worms through automatic patch generation. Technical Report CUCS-029-03, Columbia University (2003)