Buffer Overflow Defenses |
Buffer Overflow Defenses |
Kinds of Defenses |
Better Software Engineering Practices |
Better Software Engineering Practices - Testing |
Better Software Engineering
Practices– Code Inspection |
Better Software Engineering Practices - Documentation |
Find-and-patch Methods |
Find-and-patch Methods –
Software patches |
Find-and-patch Methods–
Programs that block known attacks |
Language tools |
Language tools – Languages less susceptible to buffer overflows |
Language tools – Languages based on C |
Language tools – “Safe” buffers |
Language tools – Safer library functions |
Analysis tools |
Analysis tools - Static |
Analysis tools - Dynamic |
Compiler tools |
Compiler tools – Bounds checking |
Compiler tools – Protect the return pointer |
Operating system tools |
Operating system tools –
Disable code execution outside the code space |
Operating system tools –
Intrusion detection |
Operating system tools –
Generation of an Interrupt |
About this Project |