Buffer
Overflow Defenses. ©2002, Jedidiah R. Crandall, Susan L. Gerhart, Jan G. Hogle.
http://sfsecurity.pr.erau.edu.
Analysis tools - Dynamic
Examples: Tools that
analyze memory use of a program during testing, like Purify
Pros:
Can detect buffer overflows that occur during testing
Sometimes testing wont catch buffer overflows where data is corrupted but program
behavior is not affected, dynamic analysis will
Cons:
Buffer overflows that lead to erratic program behavior can usually be found during testing
without dynamic analysis tools