Detection, exploitation and mitigation of memory errors

Logic Journal of the IGPL 32 (2):281-292 (2024)
  Copy   BIBTEX

Abstract

Software vulnerabilities are the root cause for a multitude of security problems in computer systems. Owing to their efficiency and tight control over low-level system resources, the C and C++ programming languages are extensively used for a myriad of purposes, from implementing operating system kernels to user-space applications. However, insufficient or improper memory management frequently leads to invalid memory accesses, eventually resulting in memory corruption vulnerabilities. These vulnerabilities are used as a foothold for elaborated attacks that bypass existing defense methods. In this paper, we summarise the main memory safety violation types (i.e. memory errors), and analyse how they are exploited by attackers and the main mitigation methods proposed in the research community. We further systematise the most relevant techniques with regards to memory corruption identification in current programs.

Other Versions

No versions found

Links

PhilArchive



    Upload a copy of this work     Papers currently archived: 103,486

External links

Setup an account with your affiliations in order to access resources via your University's proxy server

Through your library

Similar books and articles

Memory.Henry L. Roediger & Lyn M. Goff - 1998 - In George Graham & William Bechtel, A Companion to Cognitive Science. Blackwell. pp. 250–264.
Verbal working memory and sentence comprehension.David Caplan & Gloria S. Waters - 1999 - Behavioral and Brain Sciences 22 (1):77-94.
Zero-Day Vulnerabilities.Vaka Pavan Reddy - 2012 - International Journal of Innovative Research in Science, Engineering and Technology 1 (2):318-322.

Analytics

Added to PP
2024-03-17

Downloads
59 (#382,895)

6 months
7 (#516,663)

Historical graph of downloads
How can I increase my downloads?

Citations of this work

No citations found.

Add more citations

References found in this work

No references found.

Add more references