Data-Execution Prevention Technology in Windows System
Liang Liu · Information Security and Communications Privacy · 2013
Buffer overflow is one of the most common vulnerabilities. Almost all systems and applications always suffer from buffer overflow vulnerabilities. DEP(Data Execution Prevention) is an effective security protection mechanism included in operating systems,and could effectively prevent an application or a system from being attacked with buffer overflow vulnerabilities. However,there inevitably exist some limitations. This paper explains,with an example in bypassing DEP and executing the code through a buffer overflow vulnerability these limitations of DEP Technology. Some methods and suggestions for solving these limitations are also proposed.