Process Analysis of Buffer Overflow Based on Dynamic Binary Platform

DOI

10.2991/iccasm.2012.268How to use a DOI?

Keywords

Buffer Overflow, Dynamic Binary Platform, Dynamic Detection,Overflow Positioning, Control Flow Analysis

Abstract

Based on dynamic binary platform, an analysis method for buffer overflow is described in detail and a prototype system is implemented. Overflow detection based on exception capture, control flow analysis, and memory status checks is implemented according to the principle of buffer overflow exploits. By monitoring memory read and write instructions, control transfer instructions, system obtains call sequences and data transfer flow. Through analysis of memory data and function calls, we locate code lead to overflow. Experimental results show that the system can detect overflow, and accurately position code segment which results in buffer overflow. The prototype system is of important value in efficient analysis of 0day and rapid patching software.

Copyright

© 2012, the Authors. Published by Atlantis Press.

Open Access

This is an open access article distributed under the CC BY-NC license (http://creativecommons.org/licenses/by-nc/4.0/).

Download article (PDF)

TY  - CONF
AU  - Fei Kang
AU  - Pengcheng Dong
AU  - Hui Shu
AU  - Jing Sun
PY  - 2012/08
DA  - 2012/08
TI  - Process Analysis of Buffer Overflow Based on Dynamic Binary Platform
BT  - Proceedings of the 2012 International Conference on Computer Application and System Modeling (ICCASM 2012)
PB  - Atlantis Press
SP  - 1056
EP  - 1059
SN  - 1951-6851
UR  - https://doi.org/10.2991/iccasm.2012.268
DO  - 10.2991/iccasm.2012.268
ID  - Kang2012/08
ER  -