SafeStack: Automatically Patching Stack-Based Buffer Overflow Vulnerabilities

doi:10.1109/TDSC.2013.25

SafeStack: Automatically Patching Stack-Based Buffer Overflow Vulnerabilities

2013-11-01

40

PRE

AI

DOI：10.1109/TDSC.2013.25

Original

Original request for help

Save

Abstract

En 中文

Buffer overflow attacks still pose a significant threat to the security and availability of today's computer systems. Although there are a number of solutions proposed to provide adequate protection against buffer overflow attacks, most of existing solutions terminate the vulnerable program when the buffer overflow occurs, effectively rendering the program unavailable. The impact on availability is a serious problem on service-oriented platforms. This paper presents SafeStack, a system that can automatically diagnose and patch stack-based buffer overflow vulnerabilities. The key technique of our solution is to virtualize memory accesses and move the vulnerable buffer into protected memory regions, which provides a fundamental and effective protection against recurrence of the same attack without stopping normal system execution. We developed a prototype on a Linux system, and conducted extensive experiments to evaluate the effectiveness and performance of the system using a range of applications. Our experimental results showed that SafeStack can quickly generate runtime patches to successfully handle the attack's recurrence. Furthermore, SafeStack only incurs acceptable overhead for the patched applications.

Keywords:

Software reliability

buffer overflow vulnerability diagnosis

attack prevention

SafeStack: Automatically Patching Stack-Based Buffer Overflow Vulnerabilities

Abstract

AI Summary

Journal

Organization