Computer security is severely threatened by software vulnerabilities. Prior work shows that
information flow tracking (also referred to as taint analysis) is a promising technique to detect …

For quite some time, in systems and software design, security only came as a second
thought or even as a nice-to-have add-on. However, since the breakthrough of the Internet …

The size and complexity of software systems is growing, increasing the number of bugs.
Many of these bugs constitute security vulnerabilities. Most common of these bugs is the …

Despite the plethora of research done in code injection countermeasures, buffer overflows
still plague modern software. In 2003, Wilander and Kamkar published a comparative …

A buffer overflow attack is perhaps the most common attack used to compromise the security
of a host. This attack can be used to change the function return address and redirect …

Buffer overflow vulnerabilities are currently the most prevalent security vulnerability; they are
responsible for over half of the CERT advisories issued in the last three years. Since many …

Cyber attacks against networked computers have become relentless in recent years. The
most common attack method is to exploit memory corruption vulnerabilities such as buffer …

Buffer overflows belong to the most common class of attacks on today's Internet. Although
stack-based variants are still by far more frequent and well-understood, heap-based …

Heap overflow is a prevalent memory corruption vulnerability, playing an important role in
recent attacks. Finding such vulnerabilities in applications is thus critical for security. Many …

We present GHUMVEE, a multi-variant execution engine for software intrusion detection.
GHUMVEE transparently executes and monitors diversified replicae of processes to thwart …