Buffer Overflow Research based on Address Space Randomization in Linux
Xiaohong Yu · Computer Knowledge and Technology · 2011
Buffer overflow attack has been widely used and could cause great damage.It has become an important issue of computer system security.This paper analyzes the principle of buffer overflow attack,and presents common methods for defending the attack.Then the implementation of defense method for address space randomization in Linux system is mainly discussed,and buffer overflow attack methods for bypassing the defense are proposed.Finally,the effectiveness evaluation of the defense is also given.The results show that address space randomization technique can effectively reduce the probability of successful buffer overflow attacks,but it can not prevent attacks completely.