| Designed for detecting and stopping stack-based buffer overflows targeting the return address. (Wil05) |
| •owl:Thing |
| •sec:Countermeasure |
| •sec:MemoryProtection |
| •Canary-BasedTool |
| •StackGuard |
| •CompilerPatch |
| •StackGuard |
| CompilerPatch |
| sec:protects SOME _StackReturnAddress |
| Canary-BasedTool |
| sec:protects ONLY (sec:_Prevention AND sec:_Integrity AND sec:_Stack) |
| sec:protects ONLY _StackReturnAddress |
| dc:source | https://www.usenix.org/publications/library/proceedings/sec98/full_papers/cowan/cowan.pdf |
Class(StackGuard partial CompilerPatch
restriction(sec:protects someValuesFrom(_StackReturnAddress))
Canary-BasedTool
restriction(sec:protects allValuesFrom(intersectionOf(sec:_Prevention
sec:_Integrity
sec:_Stack)))
restriction(sec:protects allValuesFrom(_StackReturnAddress)))