Stack Buffer Overflow - Protection Schemes

Protection Schemes

Over the years a number of schemes have been developed to inhibit malicious stack buffer overflow exploitation. These may usually be classified into three categories:

  • Detect that a stack buffer overflow has occurred and thus prevent redirection of the instruction pointer to malicious code.
  • Prevent the execution of malicious code from the stack without directly detecting the stack buffer overflow.
  • Randomize the memory space such that finding executable code becomes unreliable.

Read more about this topic:  Stack Buffer Overflow

Famous quotes containing the words protection and/or schemes:

    “Is a Bill of Rights a security for [religious liberty]? If there were but one sect in America, a Bill of Rights would be a small protection for liberty.... Freedom derives from a multiplicity of sects, which pervade America, and which is the best and only security for religious liberty in any society. For where there is such a variety of sects, there cannot be a majority of any one sect to oppress and persecute the rest.”
    —James Madison (1751–1836)

    “Science is a dynamic undertaking directed to lowering the degree of the empiricism involved in solving problems; or, if you prefer, science is a process of fabricating a web of interconnected concepts and conceptual schemes arising from experiments and observations and fruitful of further experiments and observations.”
    —James Conant (1893–1978)