iCruiser: An Improved Approach for Concurrent Heap Buffer Overflow Monitoring
2014; Institute of Electronics, Information and Communication Engineers; Volume: E97.D; Issue: 3 Linguagem: Inglês
10.1587/transinf.e97.d.601
ISSN1745-1361
AutoresDonghai Tian, Xuanya Li, Mo Chen, Changzhen Hu,
Tópico(s)Diamond and Carbon-based Materials Research
ResumoHeap buffer overflow has been extensively studied for many years, but it remains a severe threat to software security. Previous solutions suffer from limitations in that: 1) Some methods need to modify the target programs; 2) Most methods could impose considerable performance overhead. In this paper, we present iCruiser, an efficient heap buffer overflow monitoring system that uses the multi-core technology. Our system is compatible with existing programs, and it can detect the heap buffer overflows concurrently. Compared with the latest heap protection systems, our approach can achieves stronger security guarantees. Experiments show that iCruiser can detect heap buffer overflow attacks effectively with a little performance overhead.
Referência(s)