BlackHat-USA-2010-Meer-History-of-Memory-Co....pdf

《BlackHat-USA-2010-Meer-History-of-Memory-Co....pdf》由会员上传分享，免费在线阅读，更多相关内容在学术论文-天天文库。

1、MemoryCorruptionAttacksThe(almost)CompleteHistorythinkstappliedresearchharoonmeer-haroon@thinkst.com25/06/2010MemoryCorruptionAttacks,The(almost)CompleteHistoryTableofContentsIntroduction!................................................................3Caveats!......................................

2、.........................................................................3Background!................................................................4MemoryCorruptionBugs!.................................................................................4OSVDB!........................................

3、........................................................................4TheWiki-Timeline!..............................................................................................7Timeline!......................................................................9Conclusion?!......................

4、......................................31Acknowledgments!...................................................31References!................................................................32BlackHatUSAPage2of3525June2010MemoryCorruptionAttacks,The(almost)CompleteHistoryIntroductionMemoryCorruptionattac

5、kshavemonopolizedtheheadlinesinthesecurityresearchcommunityforthepast2decades.WhileeverybodyisawarethatSolarDesignerdidsomeearlyHEAP“stuff”andthattheMorrisWorm“happenedinthe80ʼs”,agreatdealofinformationislostinbetween.Thisproblemisexacerbatedbecauseofsometrulypoorrecordkeepingandageneraldisregardfo

6、rattributionwhenpublishingsecurityresearch.Totheirdefense,someresearchershavepointedoutthatonlineresources(likepoststomailinglistsandforums)makeforpoorreferencesourcesduelargelytothetransientnatureofmailarchivesandforumpostings.Aseparateresultofpoorrecordkeepingisthefactthattechniquesdevisedandpubl

7、ishedinformallyareoftenmis-creditedinAcademicjournals(iftheyareindeedcreditedatall.)Tocombatthis,amoreformal,academicversionofthispaperiscurrentlynearcompletionwhichisaimedessentiallyatreadinghackerfolklore