'Stack randomization' diaporamas de présentation

0x1A Great Papers in Computer Security

CS 380S. 0x1A Great Papers in Computer Security. Vitaly Shmatikov. http://www.cs.utexas.edu/~shmat/courses/cs380s/. Problem: Lack of Diversity. Stack smashing and return-to-libc exploits need to know the (virtual) address to hijack control Address of attack code in the buffer

582 views • 46 slides

Using EMET to defend against targeted attacks

399 views • 26 slides

ASLR Minix

ASLR Minix. Wade Gasior. 1. Stack Randomization. STACK. BP. Approach: Randomize GAP size. GAP. DATA. TEXT. / usr / src /servers/pm/ exec.c. Edits to exec.c. 2. Heap Randomization. STACK. BP. Approach: malloc random space (prior to first malloc ). GAP. RANDOM SPACE. DATA.

693 views • 7 slides