Global ETD Search
Search theses and dissertations gathered from participating repositories worldwide. Every result links back to the library that holds it. No account is needed.
Results
Showing 1 to 11 of 11 for “"Buffer overflows"”.
-
Detecting buffer overflows using testcase synthesis and code instrumentation
… aims to improve existing approaches to dynamic buffer overflow detection by developing a system that utilizes code instrumentation and adaptive test case synthesis to find buffer overflows and corresponding failure-inducing inputs automatically. An evaluation of seven modern dynamic buffer …
-
Securing software : an evaluation of static source code analyzers
… 14 code examples that illustrated actual buffer overflow vulnerabilities found in various versions of Sendmail, BIND, and WU-FTPD. Each code example included a "BAD" case with one or more buffer overflow vulnerabilities and a "PATCHED" case without buffer overflows. The buffer overflows …
-
Secure virtual architecture: security for commodity software systems
… are susceptible to memory safety attacks such as buffer overflows, and they can be tricked into dynamically loading malicious code. Worse yet, commodity operating system kernels are highly privileged; exploitation of the kernel results in compromise of all applications on the system. This work …
-
Using a Web Server Test Bed to Analyze the Limitations of Web Application Vulnerability Scanners
… detect vulnerabilities such as SQL injection, buffer overflows, cross-site scripting, malicious file execution, and session hijacking. However, these tools have been found to have flaws and limitations as well. Research has shown that web application vulnerability scanners are not capable of …
-
Impact of Increased Cache Misses on Runtime Performance of MPX-enabled Programs
… MPX efficiently prevents memory errors like buffer overflows and out of bound memory accesses, it comes at the cost of high performance overheads. Also, the cache locality worsens in MPX protected applications. In our research, we analyze if there is a correlation between increase in cache …
-
Power and delay trade-offs in fading channels
… such an approach can lead to long delays or buffer overflows. These delays can be reduced but at the expense of higher transmission power. The trade-offs between the required power and various notions of delay are analyzed in this thesis. We consider a user communicating over a fading …
-
Enhancing Software Security through Code Diversification Verification, Control-flow Restriction, and Automatic Compartmentalization
… against traditional memory exploits such as buffer overflows, but new threats like code-reuse attacks quickly bypass these defenses. Code-reuse attacks exploit existing code sequences, known as gadgets, without injecting new malicious code, making them challenging to counter. Additionally, …
-
Complete spatial safety for C and C++ using CHERI capabilities
… compatible technique that protects against buffer overflows between fields of the same object, hereby ensuring that the CHERI spatial memory protection is complete. I find that the byte-granular spatial safety provided by CHERI pure-capability code is not only stronger than most other …
-
CheriOS: Designing an untrusted single-address-space capability operating system utilising capability hardware and a minimal hypervisor
… against common vulnerabilities such as buffer overflows, code injection and Return-Oriented-Programming attacks. I achieve this by designing a new CHERI-based ABI (Application Binary Interface) which includes a novel stack structure that offers temporal safety. I evaluate how practical …
-
On Reducing the Trusted Computing Base in Binary Verification
… for security vulnerabilities. Even a single buffer overflow or use-after-free in a large program may be the cause of a software crash, a data leak, or a hijacking of the control flow. Typical static formal verification tools aim to detect these issues at the source code level. WinCheck is a …
-
Vulnerability-Tolerant Architectures for IoT Devices
L'abstract è presente nell'allegato / the abstract is in the attachment