Via Luke at del.icio.us, John Wilander's Master's Thesis on buffer overflows looks like a great read.
The first part explains the fundamentals in computer security and the process memory model in operating systems. Part two discusses two common types of intrusion techniques---buffer overflow and format string attacks---and explains how they work in detail. The last part analyses static and run-time defense strategies such as compiler patches and testing tools, how they work and their effectiveness against the presented intrusion techniques. The work builds on the Linux operating system and the programming language C, and contains several code examples.
Sunday, December 14, 2003
Permalink
Feel free to post a comment below. Please see my comment policy.
Formatting Rules (No HTML):