A Comparison of Publicly Available Tools for Dynamic Buffer Overflow Prevention
Published 1 January 2003
John Wilander, Mariam Kamkar
Citations231
Generate an AI Snapshot to get a quick, structured summary of this paper.
Study Snapshot
ObjectiveStudy objective
MethodsResearch methodology
PopulationPopulation studied
Sample sizeSample sizes
OutcomesStudy outcomes here
ResultsStudy results comes here
LimitationsResearch study limitations comes here
A concise AI-generated summary of the paper will appear here once you click Generate AI Snapshot.
TL;DR
This thesis contributes to three research areas in software security, namely security requirements and intrusion prevention via static analysis and runtime detection, and proposes decorated dependence graphs as a way of modeling and pattern matching security properties of code.
Abstract
The size and complexity of software systems is growing, increasing the number of bugs. Many of these bugs constitute security vulnerabilities. Most common of these bugs is the buffer overflow vulnerability. In this paper we implement a testbed of 20 different buffer overflow attacks, and use it to compare four publicly available tools for dynamic intrusion prevention aiming to stop buffer overflows. The tools are compared empirically and theoretically. The best tool is effective against only 50% of the attacks and there are six attack forms which none of the tools can handle.
Keywords
Computer Science
PDXScholar (Portland State University)StackGuard: automatic adaptive detection and prevention of buffer-overflow attacks
1,262 Citations1998Crispin Cowan, Calton Pu +8 more
StackGuard is described: a simple compiler technique that virtually eliminates buffer overflow vulnerabilities with only modest performance penalties, and a set of variations on the technique that trade-off between penetration resistance and performance.
Intrusion detection via static analysis
647 Citations2002David Wagner, Ralph A. Dean
It is shown how static analysis may be used to automatically derive a model of application behavior and the result is a host-based intrusion detection system with three advantages: a high degree of automation, protection against a broad class of attacks based on corrupted code, and the elimination of false alarms.
Cyclone: A Safe Dialect of C
617 Citations2002Trevor Jim, J. Greg Morrisett +4 more
This paper examines safety violations enabled by C’s design, and shows how Cyclone avoids them, without giving up C”s hallmark control over low-level details such as data representation and memory management.
A First Step Towards Automated Detection of Buffer Overrun Vulnerabilities.
612 Citations2000David Wagner, Jeffrey S. Foster +2 more
The design and prototype of a new technique for finding potential buffer overrun vulnerabilities in security-critical C code are implemented and used to find new remotely-exploitable vulnerabilities in a large, widely deployed software package.
ACM SIGPLAN NoticesCCured
511 Citations2012George C. Necula, Scott McPeak +1 more
The CCured type system is described, which extends that of C by separating pointer types according to their usage, and allows both pointers whose usage can be verified statically to be type safe, and pointers whose safety must be checked at run time.
IEEE SoftwareImproving security using extensible lightweight static analysis
470 Citations2002David Evans, David Larochelle
This article describes an extensible tool that uses lightweight static analysis to detect common security vulnerabilities (including buffer overflows and format string vulnerabilities).
Backwards-Compatible Bounds Checking for Arrays and Pointers in C Programs
373 Citations1997Richard W. M. Jones, Paul H. J. Kelly
A method of bounds checking C programs that ful lls the following criteria Backwards compatibility the ability to mix checked code and unchecked libraries for which the source may be proprietary or otherwise unavailable Works with all common C programming styles.
Buffer overflows: attacks and defenses for the vulnerability of the decade
372 Citations2002Crispin Cowan, F. Wagle +3 more
This work surveys the various types of buffer overflow vulnerabilities and attacks and surveys the various defensive measures that mitigate buffer overflow vulnerabilities, including the various defensive measures that mitigate buffer overflow vulnerabilities, including StackGuard method.
Transparent run-time defense against stack smashing attacks
295 Citations2000A. Baratloo, Navjot Singh +1 more
Two new methods to detect and handle buffer overflow vulnerabilities in process stacks are presented that work with any existing pre-compiled executable and can be used transparently per-process as well as on a system-wide basis.
Digital Access to Scholarship at Harvard (DASH) (Harvard University)Statically detecting likely buffer overflow vulnerabilities
293 Citations2001David Larochelle, David Evans
RAD: a compile-time solution to buffer overflow attacks
242 Citations2002Tzi‐cker Chiueh, Fu‐Hau Hsu
This paper presents a compiler-based solution to the notorious buffer overflow attack problem, a taxonomy of defense methods, the implementation details of RAD, and the performance analysis of the RAD prototype.
StackGhost: Hardware facilitated stack protection
201 Citations2001Mike Frantzen, Mike Shuey
Stack-Ghost advances exploit prevention in that it protects every application run on the system without their knowledge nor does it require their source or binary modification.
Buffer overflows: attacks and defenses for the vulnerability of the decade
199 Citations2004Crispin Cowan, Perry Wagle +3 more
This work surveys the various types of buffer overflow vulnerabilities and attacks and surveys the various defensive measures that mitigate buffer overflow vulnerabilities, including the various defensive measures that mitigate buffer overflow vulnerabilities, including StackGuard method.
Libsafe: Protecting Critical Elements of Stacks
26 Citations1999A. Baratloo, Timothy Tsai +1 more
A new method to detect and handle buffer overflow vulnerabilities in stack stacks is presented, which works with any existing pre-compiled executable and can be used transparently, even on a system-wide basis.