Buffer overflow attack is one of the main vulnerabilities in the computer.In all areas
the most likely to attack is the program stack.In order to enforce the GCC stack overflow protection
which is not enough to defense the byte guess attack.On the basis of the latest plug-in provided by GCC
a stack protection enhancement plug-in is proposed and used as a compilation optimization process for the back end of the GCC compiler.The final experimental results show that the new compiler optimization pass
to some extent
increasing the difficulty of the attacker to guessing the canary
which using byte for byte brute force attack.And the plugin can effectively alleviate the shortage of the GCC stack smashing protection.
关键词
Keywords
references
Dhurjati D, Adve V. Backwards-compatible array bounds checking for C with very low overhead[C]//International Conference on Software Engineering. DBLP, 2006: 162-171.
Seredinschi D A, Sterca A. Enhancing the stack smashing protection in the GCC[J]. Studia Universitatis Babes-Bolyai, Informatica, 2011(4): 779-792. DOI: 779
Wagle P, Cowan C. StackGuard: Simple stack smash protection for GCC[J]. Proc of the Gcc Developers Summit, 2003: 243-255. DOI: 243
Sumi A. Bounds checking for C and C++[J]. Social Science Japan Journal, 2003(1): 165-168. DOI: 165