Memory Errors: the Past, the Present, and the Future

Victor van der Veen; Nitish dutt-Sharma; Herbert J. Bos; Lorenzo Cavallaro

Memory Errors: the Past, the Present, and the Future

Victor van der Veen, Nitish dutt-Sharma, Herbert J. Bos, Lorenzo Cavallaro

Department of Information Security

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

154 Downloads (Pure)

Abstract

Memory error exploitations have been around for over 25 years and still rank among the top 3 most dangerous software errors. Why haven’t we been able to stop them? Given the host of security measures on modern machines, are we less vulnerable than before, and can we expect to eradicate memory error problems in the near future? In this paper, we present a quarter century worth of memory errors: attacks, defenses, and statistics. A historical overview provides insight in past trends and developments, while an investigation of real-world vulnerabilities and exploits allows us to answer on the significance of memory errors in the foreseeable future.

Original language	English
Title of host publication	15th International Symposium on Research in Attacks, Intrusions and Defenses (RAID)
Publication status	Published - 12 Sept 2012

Access to Document

DocSubmitted manuscript, 514 KB

http://isg.rhul.ac.uk/sullivan/pubs/raid-2012.pdf

Cite this

@inproceedings{73f4c4f0d3994bb4a84858f1c627a55f,

title = "Memory Errors: the Past, the Present, and the Future",

abstract = "Memory error exploitations have been around for over 25 years and still rank among the top 3 most dangerous software errors. Why haven{\textquoteright}t we been able to stop them? Given the host of security measures on modern machines, are we less vulnerable than before, and can we expect to eradicate memory error problems in the near future? In this paper, we present a quarter century worth of memory errors: attacks, defenses, and statistics. A historical overview provides insight in past trends and developments, while an investigation of real-world vulnerabilities and exploits allows us to answer on the significance of memory errors in the foreseeable future.",

author = "{van der Veen}, Victor and Nitish dutt-Sharma and Bos, {Herbert J.} and Lorenzo Cavallaro",

year = "2012",

month = sep,

day = "12",

language = "English",

booktitle = "15th International Symposium on Research in Attacks, Intrusions and Defenses (RAID)",

}

TY - GEN

T1 - Memory Errors: the Past, the Present, and the Future

AU - van der Veen, Victor

AU - dutt-Sharma, Nitish

AU - Bos, Herbert J.

AU - Cavallaro, Lorenzo

PY - 2012/9/12

Y1 - 2012/9/12

N2 - Memory error exploitations have been around for over 25 years and still rank among the top 3 most dangerous software errors. Why haven’t we been able to stop them? Given the host of security measures on modern machines, are we less vulnerable than before, and can we expect to eradicate memory error problems in the near future? In this paper, we present a quarter century worth of memory errors: attacks, defenses, and statistics. A historical overview provides insight in past trends and developments, while an investigation of real-world vulnerabilities and exploits allows us to answer on the significance of memory errors in the foreseeable future.

AB - Memory error exploitations have been around for over 25 years and still rank among the top 3 most dangerous software errors. Why haven’t we been able to stop them? Given the host of security measures on modern machines, are we less vulnerable than before, and can we expect to eradicate memory error problems in the near future? In this paper, we present a quarter century worth of memory errors: attacks, defenses, and statistics. A historical overview provides insight in past trends and developments, while an investigation of real-world vulnerabilities and exploits allows us to answer on the significance of memory errors in the foreseeable future.

M3 - Conference contribution

BT - 15th International Symposium on Research in Attacks, Intrusions and Defenses (RAID)

ER -