Beyond stack smashing: recent advances in exploiting buffer overruns Export

@article{citeulike:391342, abstract = {Security vulnerabilities related to buffer overruns account for the largest share of CERT advisories, as well as high-profile worms - from the original Internet Worm in 1987 through Blaster's appearance in 2003. When malicious crackers discover a vulnerability, they devise exploits that take advantage of the vulnerability to attack a system. The article describes three powerful general-purpose families of exploits for buffer overruns: arc injection, pointer subterfuge, and heap smashing. These new techniques go beyond the traditional "stack smashing" attack and invalidate traditional assumptions about buffer overruns.}, author = {Pincus, J. and Baker, B.}, citeulike-article-id = {391342}, citeulike-linkout-0 = {http://ieeexplore.ieee.org/xpls/abs_all.jsp?arnumber=1324594}, journal = {Security \& Privacy Magazine, IEEE}, keywords = {buffer\_overrun, stack\_smashing}, number = {4}, pages = {20--27}, posted-at = {2007-11-08 21:55:34}, priority = {0}, title = {Beyond stack smashing: recent advances in exploiting buffer overruns}, url = {http://ieeexplore.ieee.org/xpls/abs_all.jsp?arnumber=1324594}, volume = {2}, year = {2004} }

TY - JOUR ID - citeulike:391342 L3 - citeulike-article-id:391342 N2 - Security vulnerabilities related to buffer overruns account for the largest share of CERT advisories, as well as high-profile worms - from the original Internet Worm in 1987 through Blaster's appearance in 2003. When malicious crackers discover a vulnerability, they devise exploits that take advantage of the vulnerability to attack a system. The article describes three powerful general-purpose families of exploits for buffer overruns: arc injection, pointer subterfuge, and heap smashing. These new techniques go beyond the traditional "stack smashing" attack and invalidate traditional assumptions about buffer overruns. IS - 4 JF - Security & Privacy Magazine, IEEE EP - 27 TI - Beyond stack smashing: recent advances in exploiting buffer overruns VL - 2 SP - 20 KW - buffer_overrun KW - stack_smashing AU - Pincus, J AU - Baker, B PY - 2004/// UR - http://ieeexplore.ieee.org/xpls/abs_all.jsp?arnumber=1324594 ER -