Information security – Monitoring or scanning of software or data including attack...
Reexamination Certificate
2005-03-30
2011-10-11
Truong, Thanhnga (Department: 2438)
Information security
Monitoring or scanning of software or data including attack...
C726S005000, C726S023000, C726S025000, C711S006000
Reexamination Certificate
active
08037526
ABSTRACT:
A method makes use of positional relationships in a memory stack between the frame pointer, such as the Extended Base Pointer (EBP) in Windows®-based systems, of a critical call initiating function making a call to a critical operating system (OS) function, the top of stack position, such as the Process Environment Block (PEB) in Windows® based systems, and the bottom of stack position, such as the Extended Stack pointer (ESP) in a Windows® based system, to detect and block buffer overflows.
REFERENCES:
patent: 5345588 (1994-09-01), Greenwood et al.
patent: 5628016 (1997-05-01), Kukol
patent: 6081854 (2000-06-01), Priem et al.
patent: 6301699 (2001-10-01), Hollander et al.
patent: 6578094 (2003-06-01), Moudgill
patent: 6832302 (2004-12-01), Fetzer et al.
patent: 7086088 (2006-08-01), Narayanan
patent: 7178132 (2007-02-01), Pierce
patent: 2003/0172293 (2003-09-01), Johnson et al.
patent: 2005/0102493 (2005-05-01), DeWitt, Jr. et al.
patent: 2007/0180524 (2007-08-01), Choi et al.
Satish et al., “Detecting Return-to-LIBC Buffer Overflows Via Dynamic Disassembly of Offsets”, U.S. Appl. No. 11/064,712, filed Feb. 23, 2005.
Salinas et al., “Method to Identify Buffer Overflows and RLIBC Attacks”, U.S. Appl. No. 11/176,855, filed Jul. 6, 2005.
Conover Matthew
Satish Sourabh
Gunnison McKay & Hodgson, L.L.P.
McKay Philip
Symantec Corporation
Truong Thanhnga
LandOfFree
Detecting buffer overflows using frame pointer characteristics does not yet have a rating. At this time, there are no reviews or comments for this patent.
If you have personal experience with Detecting buffer overflows using frame pointer characteristics, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Detecting buffer overflows using frame pointer characteristics will most certainly appreciate the feedback.
Profile ID: LFUS-PAI-O-4281502