VOTD: Buffer Overflow Engineering Secure Software Last Revised: - PowerPoint PPT Presentation

Jan 04, 2024 •223 likes •298 views

VOTD: Buffer Overflow Engineering Secure Software Last Revised: August 17, 2020 SWEN-331: Engineering Secure Software Benjamin S Meyers 1 What is Buffer Overflow? Writing data outside of the intended buffer (memory space) SWEN-331:

VOTD: Buffer Overflow Engineering Secure Software Last Revised: August 17, 2020 SWEN-331: Engineering Secure Software Benjamin S Meyers 1
What is Buffer Overflow? Writing data outside of the intended buffer (memory space) ● SWEN-331: Engineering Secure Software Benjamin S Meyers 2
How Do You Do It? String buffers in C ● char secret [15] = “sesquipedalian”; printf(“\nSecret is: ”, secret); /* “sesquipedalian” */ char str [4]; printf(“\nPlease enter up to 3 characters: ”); scanf(“%s”, str); /* User enters “12XGotcha!” */ printf(“\nSecret is now: ”, secret); /* “otcha!” */ SWEN-331: Engineering Secure Software Benjamin S Meyers 3
Mitigations Keep track of your array sizes ● Check the size of your buffer as it is inputted ● In the case of C, use functions like strncpy() instead of ● strcpy() Avoid functions like gets that don't check the input size ● SWEN-331: Engineering Secure Software Benjamin S Meyers 4
Notes Buffer overflows have been very common for a long time ● If you are clever enough, you can override the return pointer ● on the stack frame so that your own code is then executed Languages that enforce array lengths are not susceptible to ● this classic form (e.g. Java) Merely turning on the stack protector is not enough -- we ● could easily craft an exploit that stays within the stack frame SWEN-331: Engineering Secure Software Benjamin S Meyers 5
Source: https://xkcd.com/1354/ SWEN-331: Engineering Secure Software Benjamin S Meyers 6

Download Presentation

Download Policy: The content available on the website is offered to you 'AS IS' for your personal information and use only. It cannot be commercialized, licensed, or distributed on other websites without prior consent from the author. To download a presentation, simply click this link. If you encounter any difficulties during the download process, it's possible that the publisher has removed the file from their server.

Recommend

Chapter 10 Buffer Overflow Buffer Overflow Common attack mechanism first wide use by

Chapter 10 Buffer Overflow Buffer Overflow Common attack mechanism first wide use by the Morris Worm in 1988 Prevention techniques known NX bit, stack canaries, ASLR Still of major concern Recent examples:

354 views • 21 slides

Buffer Overflows with Content 2 A Process Stack Buffer Overflow Common Techniques employed

1 Buffer Overflows with Content 2 A Process Stack Buffer Overflow Common Techniques employed in buffer overflow exploits to create backdoors Execution of additional network services via the INETD daemon The addition of new users

497 views • 30 slides

Buffer Overflow CS461/ECE422 Spring 2012 Reading Material

Buffer Overflow CS461/ECE422 Spring 2012 Reading Material Based on Chapter 11 of the text Outline Buffer Overflow Stack Buffer Overflow Shell

783 views • 28 slides

History of the Stack Overflow Buffer Overflow Understood

History of the Stack Overflow Buffer Overflow Understood as early as 1972 Computer Security Technology Planning Study Morris Worm First

1.07k views • 42 slides

CS241 Computer Organization Spring 2015 Buffer Overflow 4-022015 Outline Linking

CS241 Computer Organization Spring 2015 Buffer Overflow 4-022015 Outline Linking & Loading, continued Buffer Overflow Read: CSAPP2: section 3.12: out-of-bounds memory references & buffer overflow K&R:

775 views • 43 slides

Buffer Overflow overflows Defenses and other memory safety vulnerabilities Buffer overflow

Last time We finished up By looking at Buffer Overflow overflows Defenses and other memory safety vulnerabilities Buffer overflow defenses (and workarounds) Format string vulnerabilities Integer overflow vulnerabilities This time

1.29k views • 80 slides

IT 4500 : Information Security Secure Programming Dr Joe Francom Buffer Overflow What it is? A

IT 4500 : Information Security Secure Programming Dr Joe Francom Buffer Overflow What it is? A buffer overflow occurs when a program or process tries to store more data in a buffer (temporary data storage area) than it was intended to hold.

221 views • 3 slides

Buffer Overflows and Defenses CS 419: Computer Security Lecture 10 and 11 Buffer Overflow a

Buffer Overflows and Defenses CS 419: Computer Security Lecture 10 and 11 Buffer Overflow a very common attack mechanism from 1988 Morris Worm to Code Red, Slammer, Sasser and many others prevention techniques known still of major concern

873 views • 53 slides

Buffer Software Security overflows and other memory safety vulnerabilities Buffer overflow

Last time We continued By launching our 1st section: Buffer Software Security overflows and other memory safety vulnerabilities Buffer overflow fundamentals This time We will finish up By looking at Buffer Overflow overflows

1.33k views • 103 slides

VOTD: Integer Overflow Engineering Secure Software Last Revised: August 17, 2020 SWEN-331:

VOTD: Integer Overflow Engineering Secure Software Last Revised: August 17, 2020 SWEN-331: Engineering Secure Software Benjamin S Meyers 1 What is Integer Overflow? An operation that creates a numeric value outside of the range that can

211 views • 6 slides

Buffer Overflow EXAMPLE CASE STUDY WALKTHROUGH PADRAIGNIX 12/09/2019 Agenda ELF file format

Buffer Overflow EXAMPLE CASE STUDY WALKTHROUGH PADRAIGNIX 12/09/2019 Agenda ELF file format layout Buffer Overflow theory Example code Initial Investigation / Assembly Registers Tooling Fuzzing Shellcode /

700 views • 16 slides

Buffer Overflow overflows Defenses and other memory safety vulnerabilities Finish overflow

Last time We continued By looking at Buffer Overflow overflows Defenses and other memory safety vulnerabilities Finish overflow attacks & other vulnerabilities Overflow defenses Everything youve always wanted to know about

2.41k views • 197 slides

More Vulnerabilities (buffer overreads, format string, integer overflow, heap overflows) Chester

More Vulnerabilities (buffer overreads, format string, integer overflow, heap overflows) Chester Rebeiro Indian Institute of Technology Madras Buffer Overreads 2 Buffer Overread Example 3 Buffer Overread Example len read from command line

906 views • 76 slides

Delta Pointers: Buffer Overflow Checks Without the Checks Tadde us Kroes & Koen Koning

Delta Pointers: Buffer Overflow Checks Without the Checks Tadde us Kroes & Koen Koning Erik van der Kouwe Herbert Bos Cristiano Giuffrida June 19, 2018 Preview buffer[10] secret 2 Preview buffer[10] secret buffer[5] 2 Preview

934 views • 74 slides

Software Vulnerability I Presenter: Yinzhi Cao Lehigh University Overview Buffer Overflow

CSE350/450 Lehigh University Fall 2016 Software Vulnerability I Presenter: Yinzhi Cao Lehigh University Overview Buffer Overflow Shellcode Heap Overflow Format Strings Return-oriented Programming Metasploit 101 Anatomy of the Stack

1.83k views • 124 slides

Buffer Overflow overflows Defenses and other memory safety vulnerabilities Everything

This time We will continue By looking at Buffer Overflow overflows Defenses and other memory safety vulnerabilities Everything youve always wanted to know about gdb but were too afraid to ask Overflow defenses Other memory

1.23k views • 95 slides

Fitting parametric distributions using R : the fitdistrplus package M. L. Delignette-Muller - CNRS

Introduction Choice of distributions to fit Fit of distributions Simulation of uncertainty Conclusion Fitting parametric distributions using R : the fitdistrplus package M. L. Delignette-Muller - CNRS UMR 5558 R. Pouillot J.-B. Denis - INRA

492 views • 23 slides

How many servings of CoolWhip in an 8 oz container? A. less than 10 B. between 10 and 20 C.

11/13/2017 How many servings of CoolWhip in an 8 oz container? A. less than 10 B. between 10 and 20 C. between 20 and 30 D. between 30 and 40 E. greater then 40 1 11/13/2017 2 11/13/2017 Note added after Recall... class: I changed

675 views • 35 slides

Swayam Distributed Autoscaling for Machine Learning as a Service Sameh Elnikety, Arpan Gujarati,

Swayam Distributed Autoscaling for Machine Learning as a Service Sameh Elnikety, Arpan Gujarati, Kathryn S. McKinley Yuxiong He Bjrn B. Brandenburg 1 Machine Learning as a Service (MLaaS) Machine Learning Amazon Machine Learning Data

1.25k views • 90 slides

ri RISE to the Challenges of AI Systems Joseph E. Gonzalez Assistant Professor, UC Berkeley

ri RISE to the Challenges of AI Systems Joseph E. Gonzalez Assistant Professor, UC Berkeley jegonzal@cs.berkeley.edu Training Big Data Big Model Large-Scale parallel and distributed systems Training Big Data Big Model Training Big

1.09k views • 72 slides

Week 2 - Monday What did we talk about last time? Software development Data

Week 2 - Monday What did we talk about last time? Software development Data representation Binary numbers What if you want to write a Java program that can Edit music files Stream video Organize your photo album

683 views • 49 slides

Week 4 - Friday What did we talk about last time? Examples switch statements

Week 4 - Friday What did we talk about last time? Examples switch statements Format: Multiple choice questions (~20%) Short answer questions (~20%) Programming problems (~60%) On Blackboard during class time No

1.12k views • 55 slides

Slide 1 Hello Everyone, Welcome to the Centers for Medicare & Medicare Advantage Medicaid

Slide 1 Hello Everyone, Welcome to the Centers for Medicare & Medicare Advantage Medicaid Services (CMS) Quality QIP/CCIP Annual Update Open Door Forum Improvement Project (QIP) and Chronic Care Improvement Program (CCIP) open door

230 views • 19 slides

Yashar Ganjali Department of Computer Science University of Toronto HotI 2012 Santa Clara, CA

Yashar Ganjali Department of Computer Science University of Toronto HotI 2012 Santa Clara, CA Joint work with: Monia Ghobadi, Geoff Salmon, Martin Labrecque, J. Gregory Steffan yganjali@cs.toronto.edu http://www.cs.toronto.edu/~yganjali

662 views • 35 slides