Volume 9 Number 2 (Feb. 2014)
Home > Archive > 2014 > Volume 9 Number 2 (Feb. 2014) >
JSW 2014 Vol.9(2): 336-342 ISSN: 1796-217X
doi: 10.4304/jsw.9.2.336-342

Memory-Size-Assisted Buffer Overflow Detection

Chunguang Kuang, Chunlei Wang, Minhuan Huang

Science and Technology on Information System Security Laboratory, Beijing Institute of System Engineering, Beijing, China

Abstract—Since the first buffer overflow problem occurred, many detection techniques have been presented. These techniques are effective in detecting most attacks, but some attacks still remain undetected. In order to be more effective, a memory-size-assisted buffer overflow detection(MBOD) is presented. The key feature of buffer overflow is that the size of the source memory is bigger than the size of the destination memory when memory copying operation occurs. By capturing memory copying operation and comparing memory size at run time, MBOD detects buffer overflow. MBOD collects the information of memory size in both dynamic way and static way. An implementation shows that the technique is feasible.

Index Terms—buffer overflow, detection, memory size, stack, heap

[PDF]

Cite: Chunguang Kuang, Chunlei Wang, Minhuan Huang, "Memory-Size-Assisted Buffer Overflow Detection," Journal of Software vol. 9, no. 2, pp. 336-342, 2014.

General Information

ISSN: 1796-217X (Online)
Frequency:  Quarterly
Editor-in-Chief: Prof. Antanas Verikas
Executive Editor: Ms. Yoyo Y. Zhou
Abstracting/ Indexing: DBLP, EBSCO, CNKIGoogle Scholar, ProQuest, INSPEC(IET), ULRICH's Periodicals Directory, WorldCat, etc
E-mail: jsweditorialoffice@gmail.com
  • Mar 01, 2024 News!

    Vol 19, No 1 has been published with online version    [Click]

  • Apr 26, 2021 News!

    Vol 14, No 4- Vol 14, No 12 has been indexed by IET-(Inspec)     [Click]

  • Nov 18, 2021 News!

    Papers published in JSW Vol 16, No 1- Vol 16, No 6 have been indexed by DBLP   [Click]

  • Jan 04, 2024 News!

    JSW will adopt Article-by-Article Work Flow

  • Nov 02, 2023 News!

    Vol 18, No 4 has been published with online version   [Click]