HeapTherapy: An Efficient End-to-End Solution against Heap Buffer Overflows

摘要: For decades buffer overflows have been one of the most prevalent and dangerous software vulnerabilities. Although many techniques proposed to address problem, they mostly introduce a very high overhead while others assume availability separate system pinpoint attacks or provide detailed traces for defense generation, which is slow in itself requires considerable extra resources. We propose an efficient solution against heap that integrates exploit detection, overflow prevention single system, named Heap Therapy. During program execution it conducts on-the-fly lightweight trace collection initiates automated diagnosis upon detection generate defenses real-time. It can handle both over-write over-read attacks, such as recent Heartbleed attack. The has no false positives, keeps effective under polymorphic exploits.%as generated captures semantic characteristics exploits. compliant with mainstream hardware operating systems, does not rely on specific allocation algorithms. evaluated Therapy variety services (database, web, ftp) benchmarks (SPEC CPU2006), incurs low average terms speed (6.2%) memory (7.7%).