Designed for detecting and stopping stack-based buffer overflows targeting the return address. (Wil05) |
•owl:Thing |
•sec:Countermeasure |
•sec:MemoryProtection |
•Canary-BasedTool |
•StackGuard |
•CompilerPatch |
•StackGuard |
CompilerPatch |
sec:protects SOME _StackReturnAddress |
Canary-BasedTool |
sec:protects ONLY (sec:_Prevention AND sec:_Integrity AND sec:_Stack) |
sec:protects ONLY _StackReturnAddress |
dc:source | https://www.usenix.org/publications/library/proceedings/sec98/full_papers/cowan/cowan.pdf |
Class(StackGuard partial CompilerPatch restriction(sec:protects someValuesFrom(_StackReturnAddress)) Canary-BasedTool restriction(sec:protects allValuesFrom(intersectionOf(sec:_Prevention sec:_Integrity sec:_Stack))) restriction(sec:protects allValuesFrom(_StackReturnAddress)))