Defending Embedded Systems Against Buffer Overflow via Hardware/Software

Buffer overflow attacks have been causing serious security problems for decades. With more embedded systems networked, it becomes an important research problem to defend embedded systems against buffer overflow attacks. In this paper, we propose the Hardware/Software Address Protection (HSAP) technique to solve this problem. We first classify buffer overflow attacks into two categories (stack smashing attacks and function pointer attacks) and then provide two corresponding defending strategies. In our technique, hardware boundary check method and function pointer XOR method are used to protect a system against stack smashing attacks and function pointer attacks, respectively. Although the focus of the HSAP technique is on embedded systems because of the availability of hardware support, we show that the HSAP technique can be applied to any type of processors to defend against buffer overflow attacks. We use four classes of processors to illustrate that the applicability of our techniq...

• Type: Conference
• Year: 2003
• Where: ACSAC
• Authors: Zili Shao, Qingfeng Zhuge, Yi He, Edwin Hsing-Mean Sha
• Keywords: ACSAC 2003, Buffer Overflow Attacks, Function Pointer Attacks, Security Privacy, Stack Smashing Attacks