A new approach of network buffer overflow detection based on code execution simulation
Xiaochun Yun · Ha'erbin gongye daxue xuebao · 2007
After the analysis of the principles and methods of buffer overflow,we presented a new approach that is Code Execution Simulation(CES) to detect network remote buffer overflow.This approach was based on the calculation of the maximum executive length in packets by code execution simulation.The experiment result shows that this approach is effective and quick to detect classical network buffer overflow as well as polymephic shellcode.