/GS Switch in Visual Studio

Slides:

Advertisements

Similar presentations

Defenses. Preventing hijacking attacks 1. Fix bugs: – Audit software Automated tools: Coverity, Prefast/Prefix. – Rewrite software in a type safe languange.

Advertisements

Computer Security: Principles and Practice EECS710: Information Security Professor Hossein Saiedian Fall 2014 Chapter 10: Buffer Overflow.

CSS 548 Dan Chock.  What are some ways that compilers can affect application security? ◦ Improving Application Security  Checking for and preventing.

Breno de MedeirosFlorida State University Fall 2005 Buffer overflow and stack smashing attacks Principles of application software security.

Buffer Overflows By Tim Peterson Joel Miller Dan Block.

Gabe Kanzelmeyer CS 450 4/14/10.  What is buffer overflow?  How memory is processed and the stack  The threat  Stack overrun attack  Dangers  Prevention.

CS 153 Design of Operating Systems Spring 2015 Lecture 19: Page Replacement and Memory War.

ספטמבר 04Copyright Meir Kalech1 C programming Language Chapter 3: Functions.

Andrea Bittau, Adam Belay, Ali Mashtizadeh, David Maziéres, Dan Boneh

Lecture 16 Buffer Overflow

Buffer Overflow Attacks. Memory plays a key part in many computer system functions. It’s a critical component to many internal operations. From mother.

University of Washington CSE 351 : The Hardware/Software Interface Section 5 Structs as parameters, buffer overflows, and lab 3.

Web Application Access to Databases. Logistics Test 2: May 1 st (24 hours) Extra office hours: Friday 2:30 – 4:00 pm Tuesday May 5 th – you can review.

Lecture 0 Appendix on Implementation Threats Material from Warren Page & Chpt 11, Information Security by Mark Stamp.

Lecture slides prepared for “Computer Security: Principles and Practice”, 3/e, by William Stallings and Lawrie Brown, Chapter 10 “Buffer Overflow”.

Computer Science and Software Engineering University of Wisconsin - Platteville 2. Pointer Yan Shi CS/SE2630 Lecture Notes.

Buffer Overflow Attack-proofing by Transforming Code Binary Gopal Gupta Parag Doshi, R. Reghuramalingam The University of Texas at Dallas 11/15/2004.

Buffer Overflow Proofing of Code Binaries By Ramya Reguramalingam Graduate Student, Computer Science Advisor: Dr. Gopal Gupta.

CNIT 127: Exploit Development Ch 4: Introduction to Heap Overflows

Buffer Overflow Attack Proofing of Code Binary Gopal Gupta, Parag Doshi, R. Reghuramalingam, Doug Harris The University of Texas at Dallas.

A Tool for Pro-active Defense Against the Buffer Overrun Attack D. Bruschi, E. Rosti, R. Banfi Presented By: Warshavsky Alex.

CNIT 127: Exploit Development Ch 8: Windows Overflows Part 2.

Managing C++ CHRIS DAHLBERG MID-TIER DEVELOPER SCOTTRADE.

Information Leaks Without Memory Disclosures: Remote Side Channel Attacks on Diversified Code Jeff Seibert, Hamed Okhravi, and Eric Söderström Presented.

Buffer overflow and stack smashing attacks Principles of application software security.

On the Effectiveness of Address-Space Randomization Hovav Shacham, Matthew Page, Ben Pfaff, Eu-Jin Goh, Nagendra Modadugu, Dan Boneh.

Group 9. Exploiting Software The exploitation of software is one of the main ways that a users computer can be broken into. It involves exploiting the.

Foundations of Network and Computer Security J J ohn Black CSCI 6268/TLEN 5550, Spring 2013.

Security Attacks Tanenbaum & Bo, Modern Operating Systems:4th ed., (c) 2013 Prentice-Hall, Inc. All rights reserved.

Slides by Kent Seamons and Tim van der Horst Last Updated: Nov 11, 2011.

CNIT 127: Exploit Development Ch 8: Windows Overflows Part 1.

VM: Chapter 7 Buffer Overflows. csci5233 computer security & integrity (VM: Ch. 7) 2 Outline Impact of buffer overflows What is a buffer overflow? Types.

Beyond Stack Smashing: Recent Advances In Exploiting Buffer Overruns Jonathan Pincus and Brandon Baker Microsoft Researchers IEEE Security and.

Buffer Overflows: Attacks and Defenses for the Vulnerability of the Decade Crispin Cowan SANS 2000.

Variables Bryce Boe 2012/09/05 CS32, Summer 2012 B.

Shellcode COSC 480 Presentation Alison Buben.

Buffer Overflow By Collin Donaldson.

Mitigation against Buffer Overflow Attacks

CMSC 341 Lecture 2 – Dynamic Memory and Pointers (Review)

CSC 495/583 Topics of Software Security Stack Overflows

Pointers & Dynamic Memory

CAP6135: Malware and Software Vulnerability Analysis Buffer Overflow II: Defense Techniques Cliff Zou Spring 2016.

COM S 326X Deep C Programming for the 21st Century Prof. Rozier

CSC 495/583 Topics of Software Security Stack Overflows (2)

Procedures (Functions)

Checking Memory Management

Von Neumann model - Memory

CMSC 414 Computer and Network Security Lecture 21

CSCI206 - Computer Organization & Programming

CS 465 Buffer Overflow Slides by Kent Seamons and Tim van der Horst

Advanced Buffer Overflow: Pointer subterfuge

Software Security Lesson Introduction

Foundations of Network and Computer Security

Objects with Functions and Arrays

CSC 495/583 Topics of Software Security Format String Bug (2) & Heap

Smashing the Stack for Fun and Profit

CSC 495/583 Topics of Software Security StackGuard & Format String Bug

CAP6135: Malware and Software Vulnerability Analysis Buffer Overflow II: Defense Techniques Cliff Zou Spring 2011.

Von Neumann model - Memory

CAP6135: Malware and Software Vulnerability Analysis Buffer Overflow II: Defense Techniques Cliff Zou Spring 2009.

Pointers Pointers point to memory locations

Understanding and Preventing Buffer Overflow Attacks in Unix

FIGURE Illustration of Stack Buffer Overflow

Several Tips on Project 1

Hello World Program In Visual Studio and Debugging

CNT4704: Analysis of Computer Communication Network Special Topic: Buffer Overflow II: Defense Techniques Cliff Zou Fall 2011.

Format String Vulnerability

Return-to-libc Attacks

Presentation transcript:

/GS Switch in Visual Studio Chanda Dutta, Divya Makhija, Sugita Kumari & Upma Sharma Tech Mahindra Ltd. 91-022-66882000 July 31st 2006

What is the /GS Switch? Buffer security check option Enabled by default Gives warnings when following types of functions are used - gets() and strcpy() Compiler recommends gets_s( ) and strcpy_s( )

How does the /GS Switch work? Compiler inserts a “canary” after a memory array (buffer) declared on stack. “Canary” are random bytes that can be verified by the compiler. BO usually involves a canary-overwrite. If the canary is modified error is generated.

/GS Switch Limitations Does not detect BO in either heap or data segments. Return address on the stack can still be overwritten. It is possible to defeat the canary by detecting its value (brute-force) It is also possible to return to a rogue address. /GS does not prevent this. Code compiles without warning even if /GS is enabled. Restricted to automatic variables

/GS Switch Summary Be aware of /GS switch limitations. /GS switch detects, does not prevent.

Thank you!