|
Recently, buffer overflow has become a drastic security problem for computer systems. The main cause of it is due to the lack of boundary checking mechanism in the C language. Hackers often get access into different systems without authorization through this kind of vulnerability. Some virus and worms also are spread by the same vulnerability. According to where the attacking code residing, there are two kinds of buffer overflow attacks: stack buffer overflow, and heap buffer overflow. Although there are some work proposed to eliminate buffer overflow, they all suffer from some drawbacks such as system slowing down, memory wasting, non-compatible code, and hardware dependent. In this work, we propose to introduce some basic memory checking mechanism in order to defend heap buffer overflow. Our approach can provide a convenient, efficient, and effective way to defend heap buffer overflow problem.
|