Work

Automated exploit generation method for stack buffer overflow vulnerabilities

Year: 2014

Type: article

Abstract: In this paper automated method for exploit generation is presented. This method allows to construct exploits for stack buffer overflow vulnerabilities and also to prioritize software bugs. It is applied to program binaries, without requiring debug information. The method is based on dynamic analysis and symbolic execution. We present a tool implementing the method. We used this tool to generate exploits for 8 vulnerabilities in both Linux and Windows programs, 3 of which were undocumented at the time this paper was written.

Source: Proceedings of the Institute for System Programming of RAS

DOI: 10.15514/ispras-2014-26(3)-7

Authors: V.A. Padaryan, V.V. Kaushan, A.N. Fedotov

Institution: Institute for System Programming

Language: English

Topic: Security and Verification in Computing

Subfield: Hardware and Architecture

Field: Computer Science

Domain: Physical Sciences

Open Access status: diamond

OpenAlex ID: W4233969565

FWCI: 1.83

Cites: 13

Cited by: 9

Related to: 10