Since the first buffer overflow problem occurred,many detection techniques have been presented. Thesetechniques are effective in detecting most attacks, but someattacks still remain undetected. In order to be more effective,a memory-size-assisted buffer overflow detection(MBOD) ispresented. The key feature of buffer overflow is that the sizeof the source memory is bigger than the size of thedestination memory when memory copying operationoccurs. By capturing memory copying operation andcomparing memory size at run time, MBOD detects bufferoverflow. MBOD collects the information of memory size inboth dynamic way and static way. An implementation showsthat the technique is feasible.
展开▼
