HIT thesis SCP.pptVIP

SCP: A System Call Protector against Buffer Overflow Attacks dove 邱秉誠 Outline Introduction Attacking Method Related Work SCP System Design Experimental Result Conclusion Future Work Introduction (1) Buffer Overflow Attack Easily launched Huge amount of targets Strongly damage The most dangerous threat in the internet Introduction (2) Many countermeasures were publishedBut also were defeated Developing an efficient and effective approach becomes a critical and emergent issue Attacking Method (1) Stack Overflow Attack Overflow the return address to launch injected code (shell code) Attack