Buffer overflows: attacks and defenses for the vulnerability of the decade

By Crispin Cowan, Perry Wagle, Calton Pu, Steve Beattie, J. Walpole. Foundations of Intrusion Tolerant Systems, 2003 [Organically Assured and Survivable Information Systems], 2000

539 citations recorded by the source corpus.

Subfields: Artificial Intelligence, Computer Networks and Communications, Signal Processing

View Paper: https://www.semanticscholar.org/paper/121ffed47f2b2cfa7682e9b78b57da1699219de0

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

In Artificial Intelligence

1. Wenke Lee
2. Prahlad Fogla
3. Oleg M. Kolesnikov
4. Dmitry Evtyushkin
5. Nael B. Abu-Ghazaleh
6. Dmitry V. Ponomarev
7. Ruby B. Lee
8. Drew Dean

In Computer Networks and Communications

1. Wenke Lee
2. Prahlad Fogla
3. Oleg M. Kolesnikov
4. W. Gong
5. Henry Hanping Feng
6. Nael B. Abu-Ghazaleh
7. Ruby B. Lee
8. Drew Dean

In Signal Processing

1. Wenke Lee
2. Prahlad Fogla
3. Oleg M. Kolesnikov
4. W. Gong
5. Henry Hanping Feng
6. Dmitry Evtyushkin
7. Nael B. Abu-Ghazaleh
8. Dmitry V. Ponomarev

Citations in the corpus

• Intrusion detection via static analysis (2001, background): “Application logic bugs, however, are dwarfed in practice by buffer overflow problems and other vulnerabilities that allow for execution of arbitrary machine code of the attacker’s choice [8, 35], and it is the latter type of vulnerability on which we focus.”
• Jump over ASLR: Attacking branch predictors to bypass ASLR (2016, background): “Memory corruption attacks such as stack and heap overflows [1], [2] and format string attacks [3] can lead to control hijacking and arbitrary code execution by the attackers.”
• Anomaly detection using call stack information (2003, methodology): “proposed a method, called StackGuard, to detect and prevent buffer overflow attacks [2, 3].”
• SoftBound: highly compatible and complete spatial memory safety for c (2009, background): “…Sciences Department, University of Pennsylvania santoshn@cis.upenn.edu jianzhou@cis.upenn.edu milom@cis.upenn.edu stevez@cis.upenn.edu Abstract The seriousbugs and security vulnerabilitiesfacilitatedby C/C++ s lack of bounds checking are well known, yet C and C++ remain in widespread use.”
• Distributed Denial of Service: Taxonomies of Attacks, Tools, and Countermeasures (2004, background): “This causes the extra data to overwrite other information adjacent to the buffer in the memory stack, such as a procedure return address [13] .”
• PointGuard™: Protecting Pointers from Buffer Overflow Vulnerabilities (2003, background): “Previously we surveyed buffer overflow attacks and defenses [10].”