Buffer Overflow Attacks: Detect, Exploit, Prevent
Description
The SANS Institute maintains a list of the "Top 10 Software Vulnerabilities." At the current time, over half of these vulnerabilities are exploitable by Buffer Overflow attacks, making this class of attack one of the most common and most dangerous weapon used by malicious attackers. This is the first book specifically aimed at detecting, exploiting, and preventing the most common and dangerous attacks. Buffer overflows make up one of the largest collections of vulnerabilities in existence; And a large percentage of possible remote exploits are of the overflow variety. Almost all of the most devastating computer attacks to hit the Internet in recent years including SQL Slammer, Blaster, and I Love You attacks. If executed properly, an overflow vulnerability will allow an attacker to run arbitrary code on the victim’s machine with the equivalent rights of whichever process was overflowed. This is often used to provide a remote shell onto the victim machine, which can be used for further exploitation. A buffer overflow is an unexpected behavior that exists in certain programming languages. This book provides specific, real code examples on exploiting buffer overflow attacks from a hacker's perspective and defending against these attacks for the software developer. Over half of the "SANS TOP 10 Software Vulnerabilities" are related to buffer overflows. None of the current-best selling software security books focus exclusively on buffer overflows. This book provides specific, real code examples on exploiting buffer overflow attacks from a hacker's perspective and defending against these attacks for the software developer.
Get the book
Similar books
-
Canary Bit: Extending Secure Bit for Data Pointer Protection from Buffer Overflow Attacks
By Michael S. KirkpatrickCanary Bit: Extending Secure Bit for Data Pointer Protection from Buffer Overflow Attacks
-
Hands-On Penetration Testing with Python: Enhance Your Ethical Hacking Skills to Build Automated and Intelligent Systems
By Furqan KhanBy the end of this book, you'll have acquired adequate skills to leverage Python as a helpful tool to pentest and secure infrastructure, while also creating your own custom exploits.
-
Secure Coding in C and C++
By Robert C. SeacordThe C Programming Language, 2nd ed. Englewood Cliffs, NJ: Prentice-Hall, 1988. [Kerr 04] Kerr, K. Putting cyberterrorism into context (2004). http://www.auscert.org.au/render.html?it=3552. [Kirwan 04] Kirwan, M. The Quest for Secure ...
-
The Shellcoder's Handbook: Discovering and Exploiting Security Holes
By Chris Anley, John Heasman, Felix LindnerArbitrary-code execution vulnerabilities still allow attackers to run code of their choice on your system—with disastrous results. In a nutshell, this book is about code and data and what happens when the two become confused.