Buffer Overflow Attack Impact De tection Based on Process Execution Profile
Peng Cheng Su, Xingyuan Chen, Tang Huilin, Ning Zhu · Jisuanji gongcheng · 2009
Attack impact detection is important to the defence of buffer overflow attack. Windows Native APIs are proper data resource of attack impact detection. This paper proposes the concept of execution profile and the establishment method. Through the analysis of buffer overflow attack impact, buffer overflow attack impact detection based on process execution profile is proposed. Experiment illustrates this method is valid.