Run-time detection of heap-based overflows

17th Large Installation Systems Administration Conference, LISA 2003

Volumn , Issue , 2003, Pages 51-59

  Robertson, William ^a   Kruegel, Christopher ^a   Mutz, Darren ^a   Valeur, Fredrik ^a  

^a UNIVERSITY OF CALIFORNIA   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

BUFFER OVERFLOWS; CODE EXECUTION; DETECTION SCHEME; DIFFERENT MECHANISMS; MANAGEMENT INFORMATION; MEMORY PROTECTION; PERFORMANCE IMPACT; REAL-WORLD;

EID: 85094678188     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (35)

1. Spafford, E., "The Internet Work Program, " Analysis Computer Communication Review, 1998.
2. AlephOne, Smashing the Stack for Fun and Profit, http://www.phrack.org/phrack/49/P49-14.
3. Wilander, J. and M. Kamkar, "Comparison of Publicly Available Tools for Dynamic Buffer Overflow Prevention, " 10th Network and Distributed System Security Symposium, 2003.
4. CERT Advisory CA-2002-11, "Heap Overflow in Cachefs Daemon (cachefsd), " http://www.cert. org/advisories/CA-2002-11.html.
5. CERT Advisory CA-2002-33, "Heap Overflow Vulnerability in Microsoft Data Access Components (MDAC), " http://www.cert.org/advisories/ CA-2002-33.html.
6. Conover, M., w00w00 on Heap Overflows, http:// www.w00w00.org/files/articles/heaptut.txt.
7. anonymous, Once upon a free(), http://www. phrack.org/phrack/57/p57-0x09.
8. Kaempf, M., Vudo malloc tricks, http://www. phrack.org/phrack/57/p57-0x08.
9. Designer, Solar, JPEG COM Marker Processing Vulnerability in Netscape Browsers, http://www. openwall.com/advisories/OW-002-netscape-jpeg. txt.
10. The GNU C Library, http://www.gnu.org/software/ libc/libc.html.
11. Cowan, C., et al., "StackGuard: Automatic Adaptive Detection and Prevention of Buffer- Overflow Attacks, " 7th USENIX Security Conference, 1998.
12. Vendicator, Stack Shield Technical Info, http:// www.angelfire.com/sk/stackshield/index.html.
13. Baratloo, A., N. Singh and T. Tsai, Libsafe: Protecting critical elements of stacks, http://www. research.avayalabs.com/project/libsafe/index.html.
14. Baratloo, A., N. Singh and T. Tsai, "Transparent Run-time Defense Against Stack Smashing Attacks, " USENIX Annual Technical Conference, 2000.
15. Designer, Solar, Non-executable stack patch, http://www.openwall.com.
16. RSX: Run-time addressSpace eXtender, http://www. starzetz.com/software/rsx/index.html.
17. PA X: Non-executable heap-segments, http://pageexec. virtualave.net/index.html.
18. Valgrind, an open-source memory debugger for x86-GNU/Linux, http://developer.kde.org/~sewardj/ index.html.
19. Electric Fence - Memory Debugger, http://www. gnu.org/directory/devel/debug/ElectricFence.html.
20. Huang, Y., Protection Against Exploitation of Stack and Heap Overflows, http://members. rogers.com/exurity/pdf/AntiOverflows.pdf.
21. Necula, George C., Scott McPeak, and Westley Weimer, "CCured: Type-safe retrotting of legacy code, " 29th ACM Symposium on Principles of Programming Languages, 2002.
22. Dean, D., E. Felten and D. Wallach, "Java Security: From HotJava to Netscape and Beyond, " IEEE Symposium on Security and Privacy, 1996.
23. The Last Stage of Delirium (LSD), Java and Java Virtual Machine Vulnerabilities and their Exploitation Techniques, http://www.lsd-pl.net/ java_security.html.
24. ISO JTC 1/SC 22/WG 14 - C, http://std.dkuug. dk/JTC1/SC22/WG14/index.html.
25. ISO JTC 1/SC 22/WG 15 - POSIX, http://std.dkuug. dk/JTC1/SC22/WG15/index.html.
26. The GNU C Library Manual, http://www.gnu. org/manual/glibc-2.2.5/libc.html.
27. Lea, D., A Memory Allocator, http://gee.cs. oswego.edu/dl/html/malloc.html.
28. Wilson, P., M. Johnstone, M. Neely, and D. Boles, "Dynamic Storage Allocation: A Survey and Critical Review, " International Workshop on Memory Management, 1995.
29. Chiueh, T., and F. Hsu, "RAD: A Compile-time Solution to Buffer Overflow Attacks, " 21st Conference on Distributed Computing Systems, 2001.
30. WU-Ftpd File Globbing Heap Corruption Vulnerability, http://www.securityfocus.com/bid/3581.
31. Sudo Password Prompt Heap Overflow Vulnerability, http://www.securityfocus. com/bid/4593.
32. CVS Directory Request Double Free Heap Corruption Vulnerability, http://www.securityfocus. com/bid/6650.
33. AIM IX Benchmarks, http://www.caldera.com/ developers/community/contrib/aim.html.
34. Mindcraft WebStone - The Benchmark for Web Servers, http://www.mindcraft.com/benchmarks/ webstone/.
35. OSDB - The Open Source Database Benchmark, http://osdb.sourceforge.net.