Advanced exploitation of buffer overflow
英文摘要：
This article describes in depth several ways of exploiting buffer overflows in the UNIX operating systems.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
继续探索
相关论文
防御WebAssembly中的缓冲区溢出：一种转译器方法
Defending Buffer Overflows in WebAssembly: A Transpiler Approach
Harvard University（哈佛大学）
本文提出了一种方法和WebAssembly转译器，通过在无管理内存中添加栈守护者和地址空间布局随机化来防止缓冲区溢出。
cs.CR
Buffer overflow vulnerabilities in CUDA: a preliminary analysis
We present a preliminary study of buffer overflow vulnerabilities in CUDA software running on GPUs. We show how an attacker can overrun a buffer to corrupt sensitive data or steer the execution flow by overwriting function pointers, e.g., manipulating the virtual table of a C++ object. In view of a potential mass market diffusion of GPU accelerated software this may be a major concern.
cs.CR
Variable Record Table: A Run-time Solution for Mitigating Buffer Overflow Attack
We present a novel approach to mitigate buffer overflow attack using Variable Record Table (VRT). Dedicated memory space is used to automatically record base and bound information of variables extracted during runtime. We instrument frame pointer and function(s) related registers to decode variable memory space in stack and heap. We have modified Simplescalar/PISA simulator to extract variables space of six (6) benchmark suites from MiBench. We have tested 290 small C programs (MIT corpus suite) having 22 different buffer overflow vulnerabilities in stack and heap. Experimental results show th…
cs.CR
Spotting Silent Buffer Overflows in Execution Trace through Graph Neural Network Assisted Data Flow Analysis
A software vulnerability could be exploited without any visible symptoms. When no source code is available, although such silent program executions could cause very serious damage, the general problem of analyzing silent yet harmful executions is still an open problem. In this work, we propose a graph neural network (GNN) assisted data flow analysis method for spotting silent buffer overflows in execution traces. The new method combines a novel graph structure (denoted DFG+) beyond data-flow graphs, a tool to extract {\tt DFG+} from execution traces, and a modified Relational Graph Convolution…
cs.CR
RISC-V架构上基于硬件的栈缓冲区溢出攻击检测
Hardware-based stack buffer overflow attack detection on RISC-V architectures
针对RISC-V系统的栈缓冲区溢出攻击，本文在PULP平台利用半监督异常检测评估硬件检测方法，并提出以硬件为主、软硬件协同的检测方案。
cs.CR
Context-aware Failure-oblivious Computing as a Means of Preventing Buffer Overflows
In languages like C, buffer overflows are widespread. A common mitigation technique is to use tools that detect them during execution and abort the program to prevent the leakage of data or the diversion of control flow. However, for server applications, it would be desirable to prevent such errors while maintaining availability of the system. To this end, we present an approach to handle buffer overflows without aborting the program. This approach involves implementing a continuation logic in library functions based on an introspection function that allows querying the size of a buffer. We de…
cs.CR
更多相关论文收起更多论文
S3Library: Automatically Eliminating C/C++ Buffer Overflow using Compatible Safer Libraries
Annex K of C11, bounds-checking interfaces, recently introduced a set of alternative functions to mitigate buffer overflows, primarily those caused by string/memory functions. However, poor compatibility limits their adoption. Failure oblivious computing can eliminate the possibility that an attacker can exploit memory errors to corrupt the address space and significantly increase the availability of systems. In this paper, we present S3Library (Saturation-Memory-Access Safer String Library), which is compatible with the standard C library in terms of function signature. Our technique automati…
cs.CR
Speculative Buffer Overflows: Attacks and Defenses
Practical attacks that exploit speculative execution can leak confidential information via microarchitectural side channels. The recently-demonstrated Spectre attacks leverage speculative loads which circumvent access checks to read memory-resident secrets, transmitting them to an attacker using cache timing or other covert communication channels. We introduce Spectre1.1, a new Spectre-v1 variant that leverages speculative stores to create speculative buffer overflows. Much like classic buffer overflows, speculative out-of-bounds stores can modify data and code pointers. Data-value attacks can…
cs.CR
Stack-based Buffer Overflow Detection using Recurrent Neural Networks
University of Oslo（奥斯陆大学）
Detecting vulnerabilities in software is a critical challenge in the development and deployment of applications. One of the most known and dangerous vulnerabilities is stack-based buffer overflows, which may allow potential attackers to execute malicious code. In this paper we consider the use of modern machine learning models, specifically recurrent neural networks, to detect stack-based buffer overflow vulnerabilities in the assembly code of a program. Since assembly code is a generic and common representation, focusing on this language allows us to potentially consider programs written in s…
cs.CRcs.LG
混合专家模型中的缓冲区溢出
Buffer Overflow in Mixture of Experts
Google DeepMind（谷歌DeepMind）
本研究揭示混合专家模型中的专家路由策略因跨批次依赖而存在安全漏洞，恶意查询可影响同批次其他良性查询的输出，并通过概念验证攻击予以证实。
cs.CRcs.LG
BASICS：用于缓冲区溢出缓解的二进制分析和堆栈完整性检查系统
BASICS: Binary Analysis and Stack Integrity Checker System for Buffer Overflow Mitigation
Vrije Universiteit Amsterdam（阿姆斯特丹自由大学）；Faculty of Sciences of the University of Lisboa（里斯本大学理学院）
BASICS通过模型检查和结合执行技术，自动验证二进制代码中的堆栈内存安全属性，利用_trampoline技术修复漏洞，实现缓冲区溢出的有效缓解。
cs.CR
L4 Pointer: An efficient pointer extension for spatial memory safety support without hardware extension
Since buffer overflow has long been a frequently occurring, high-risk vulnerability, various methods have been developed to support spatial memory safety and prevent buffer overflow. However, every proposed method, although effective in part, has its limitations. Due to expensive bound-checking or large memory in taking for metadata, the software-only support for spatial memory safety inherently entails runtime overhead. Contrastingly, hardware-assisted methods are not available without specific hardware assistants. To mitigate such limitations, Herein we propose L4 Pointer, which is a 128-bit…
cs.CR
使用上下文感知提示微调的大型语言模型进行代码漏洞修复
Code Vulnerability Repair with Large Language Model using Context-Aware Prompt Tuning
University of Delaware（德克萨斯大学）；Colorado School of Mines（科罗拉多矿业学院）
本研究针对LLM在缓冲区溢出漏洞修复上的不足，提出上下文感知提示微调技术，通过注入领域知识将GitHub Copilot的修复率从15%提升至63%。
cs.AIcs.CR
基于特征工程的神经网络源代码缓冲区溢出漏洞检测
Feature Engineering-Based Detection of Buffer Overflow Vulnerability in Source Code Using Neural Networks
Kennesaw State University（肯尼索州立大学）；Marquette University（马凯特大学）；University of Calabria（卡拉布里亚大学）
本研究针对软件源代码缓冲区溢出漏洞检测问题，基于特征工程结合多种词嵌入算法与神经网络模型，提出可扩展的检测方法并开展对比验证。
cs.CRcs.LGcs.SE
