NDLI: SigFree: A Signature-Free Buffer Overflow Attack Blocker

Please wait, while we are loading the content...

SigFree: A Signature-Free Buffer Overflow Attack Blocker

Content Provider	IEEE Xplore Digital Library
Author	Xinran Wang Chi-Chun Pan Peng Liu Sencun Zhu
Copyright Year	2004
Abstract	We propose SigFree, an online signature-free out-of-the-box application-layer method for blocking code-injection buffer overflow attack messages targeting at various Internet services such as Web service. Motivated by the observation that buffer overflow attacks typically contain executables whereas legitimate client requests never contain executables in most Internet services, SigFree blocks attacks by detecting the presence of code. Unlike the previous code detection algorithms, SigFree uses a new data-flow analysis technique called code abstraction that is generic, fast, and hard for exploit code to evade. SigFree is signature free, thus it can block new and unknown buffer overflow attacks; SigFree is also immunized from most attack-side code obfuscation methods. Since SigFree is a transparent deployment to the servers being protected, it is good for economical Internet-wide deployment with very low deployment and maintenance cost. We implemented and tested SigFree; our experimental study shows that the dependency-degree-based SigFree could block all types of code-injection attack packets (above 750) tested in our experiments with very few false positives. Moreover, SigFree causes very small extra latency to normal client requests when some requests contain exploit code.
Sponsorship	IEEE Computer Society
Starting Page	65
Ending Page	79
Page Count	15
File Size	2157608
File Format	PDF
ISSN	15455971
Volume Number	7
Issue Number	1
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2010-01-01
Publisher Place	U.S.A.
Access Restriction	One Nation One Subscription (ONOS)
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Buffer overflow Web and internet services Testing Web services Detection algorithms Data analysis Algorithm design and analysis Web server Protection Costs code-injection attacks. Intrusion detection buffer overflow attacks Security and Protection Security and Privacy Protection
Content Type	Text
Resource Type	Article
Subject	Computer Science Electrical and Electronic Engineering

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Microarchitectural Protection Against Stack-Based Buffer Overflow Attacks

Integrated access control and intrusion detection for Web servers

Penetration Testing for Web Services

Mitigating XML Injection 0-Day Attacks through Strategy-Based Detection Systems

Defending against Web Application Vulnerabilities

Security protection and checking for embedded system integration against buffer overflow attacks via hardware/software

In-Depth Packet Inspection Using a Hierarchical Pattern Matching Algorithm

Five User-Customizable Web Site Security Features

An Experimental Analysis of Attack Classification Using Machine Learning in IoT Networks

SigFree: A Signature-Free Buffer Overflow Attack Blocker

Similar Documents

Microarchitectural Protection Against Stack-Based Buffer Overflow Attacks

Integrated access control and intrusion detection for Web servers

Penetration Testing for Web Services

Mitigating XML Injection 0-Day Attacks through Strategy-Based Detection Systems

Defending against Web Application Vulnerabilities

Security protection and checking for embedded system integration against buffer overflow attacks via hardware/software

In-Depth Packet Inspection Using a Hierarchical Pattern Matching Algorithm

Five User-Customizable Web Site Security Features

An Experimental Analysis of Attack Classification Using Machine Learning in IoT Networks

SigFree: A Signature-Free Buffer Overflow Attack Blocker