|
计算机科学 2006
OverflowDungeon: A Novel Overflow Attack Prevention System
|
Abstract:
Overflow attack does the broadest harm to network applications. There are techniques which can prevent the kind of attack. However they have obvious flaws. This paper presents a novel mechanism of overflow attack prevention, which prevents shell code from exploiting resources of system. In this way, we need not change compiler or operating system. It uses statistic way to prevent dummy return trick. The implementation shows that it can prevent overflow attack and has advantage of performance over other mechanisms.