On the effectiveness of NX, SSP, RenewSSP, and ASLR against stack buffer overflows

Hector Marco Gisbert, Ismael Ripoll

Research output: Chapter in Book/Report/Conference proceedingChapter

13 Citations (Scopus)

Abstract

Stack Smashing Protector (SSP), Address-Space Layout Randomization (ASLR) and Non-executable (NX) are techniques for defending systems against buffer overflow attacks but not limited to them. These mechanism are available in modern operating systems like Android, GNU/Linux and Windows. Unfortunately, to keep up with the rapidly evolving landscape of cyber-security it is necessary to reassess the effectiveness of these protection techniques to avoid a false sense of security. This paper assess the effectiveness of these techniques against stack buffer overflow exploitation. Our study indicates that the SSP technique is the most effective against stack buffer overflows. On forking servers, the ASLR technique is almost useless on 32-bit architectures due to the limited entropy provided by the size of the address space. The recently proposed technique Renew SSP, which is an improvement of the well known SSP, outperforms the original SSP in all the cases, it is highly effective against the dangerous byte-for-byte attack and on systems with low secret entropy as x86 and ARM.
Original languageEnglish
Title of host publication2014 IEEE 13th International Symposium on Network Computing and Applications
Subtitle of host publicationNCA 2014
PublisherIEEE
Pages145-152
Number of pages8
ISBN (Electronic)9781479953929
ISBN (Print)9781479953936
DOIs
Publication statusPublished - 16 Oct 2014
Externally publishedYes
Event2014 IEEE 13th International Symposium on Network Computing and Applications - Cambridge, United States
Duration: 21 Aug 201423 Aug 2014

Conference

Conference2014 IEEE 13th International Symposium on Network Computing and Applications
Abbreviated titleNCA 2014
CountryUnited States
CityCambridge
Period21/08/1423/08/14

Keywords

  • servers
  • computer crashes
  • entropy
  • libraries
  • payloads
  • force
  • layout

Fingerprint Dive into the research topics of 'On the effectiveness of NX, SSP, RenewSSP, and ASLR against stack buffer overflows'. Together they form a unique fingerprint.

  • Cite this

    Marco Gisbert, H., & Ripoll, I. (2014). On the effectiveness of NX, SSP, RenewSSP, and ASLR against stack buffer overflows. In 2014 IEEE 13th International Symposium on Network Computing and Applications: NCA 2014 (pp. 145-152). IEEE. https://doi.org/10.1109/NCA.2014.28