Science and Technology on Information System Security Laboratory, Beijing Institute of System Engineering, Beijing, China

---

Abstract—Since the first buffer overflow problem occurred, many detection techniques have been presented. These techniques are effective in detecting most attacks, but some attacks still remain undetected. In order to be more effective, a memory-size-assisted buffer overflow detection(MBOD) is presented. The key feature of buffer overflow is that the size of the source memory is bigger than the size of the destination memory when memory copying operation occurs. By capturing memory copying operation and comparing memory size at run time, MBOD detects buffer overflow. MBOD collects the information of memory size in both dynamic way and static way. An implementation shows that the technique is feasible.

Index Terms—buffer overflow, detection, memory size, stack, heap

[PDF]

Cite: Chunguang Kuang, Chunlei Wang, Minhuan Huang, "Memory-Size-Assisted Buffer Overflow Detection," Journal of Software vol. 9, no. 2, pp. 336-342, 2014.