A lightweight buffer overflow protection mechanism with failure-oblivious capability

Tz Rung Lee, Kwo Cheng Chiu, Da Wei Chang

研究成果: Conference contribution

摘要

Buffer overflow has become a major source of network security vulnerability. Traditional schemes for detecting buffer overflow attacks usually terminate the attacked service, degrading the service availability. In this paper, we propose a lightweight buffer overflow protection mechanism that allows continued network service. The proposed mechanism allows a service program to reconfigure itself to identify and protect the vulnerable functions upon buffer overflow attacks. Protecting only the vulnerable functions, instead of the whole program, keeps the runtime overhead small. Moreover, the mechanism adopts the idea of failure-oblivious computing to allow service programs to execute through memory errors caused by the attacks once the vulnerable functions have been identified, eliminating the need of restarting the service program upon further attacks to the vulnerable functions. We have applied the mechanism on five Internet servers. The experiment results show that the mechanism has little impact on the runtime performance.

原文English
主出版物標題Algorithms and Architectures for Parallel Processing - 9th International Conference, ICA3PP 2009, Proceedings
頁面661-672
頁數12
DOIs
出版狀態Published - 2009
事件9th International Conference on Algorithms and Architectures for Parallel Processing, ICA3PP 2009 - Taipei, Taiwan
持續時間: 2009 六月 82009 六月 11

出版系列

名字Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
5574 LNCS
ISSN(列印)0302-9743
ISSN(電子)1611-3349

Other

Other9th International Conference on Algorithms and Architectures for Parallel Processing, ICA3PP 2009
國家Taiwan
城市Taipei
期間09-06-0809-06-11

All Science Journal Classification (ASJC) codes

  • Theoretical Computer Science
  • Computer Science(all)

指紋 深入研究「A lightweight buffer overflow protection mechanism with failure-oblivious capability」主題。共同形成了獨特的指紋。

引用此