Research on Classification of Memory Attack
Gang Shi, Jiangtao Ru · 2016
Exploits on memory vulnerability has existed for two or three decades, it's always an important problem how to prevent memory attack.Vulnerability patch can't resolve the problem fundamentally, we should think about how to improve the memory security mechanism of OS, such as DEP, ALSR, etc.This paper builds the bridge between memory attack and defense by categorizing memory attack and memory vulnerability, which lay a foundation for studying better memory security mechanism.Also database of memory vulnerability and database of memory attack is built on the categorization, which can map the reality of memory attack and defense.What's more, the categorization could be extended for the future situation.