Buffer Overflow Defenses
Buffer Overflow Defenses
Kinds of Defenses
Better Software Engineering Practices
Better Software Engineering Practices - Testing
Better Software Engineering Practices–
Code Inspection
Better Software Engineering Practices - Documentation
Find-and-patch Methods
Find-and-patch Methods –
Software patches
Find-and-patch Methods–
Programs that block known attacks
Language tools
Language tools –
Languages less susceptible to buffer overflows
Language tools – Languages based on C
Language tools – “Safe” buffers
Language tools – Safer library functions
Analysis tools
Analysis tools - Static
Analysis tools - Dynamic
Compiler tools
Compiler tools – Bounds checking
Compiler tools –
Protect the return pointer
Operating system tools
Operating system tools –
Disable code execution outside the code space
Operating system tools –
Intrusion detection
Operating system tools –
Generation of an Interrupt
About this Project