SigFree: A Signature-Free Buffer Overflow Attack Blocker

No abstract is available for this paper.

• Publication year

  2006

• Venue

  IEEE Transactions on Dependable and Secure Computing

• Publication date

  2006-07-31

• Fields of study

  Computer Science

• Identifiers
  DOI 10.1109/TDSC.2008.30
• External record

  Open on Semantic Scholar

• Source metadata

  Semantic Scholar

• No claims are published for this paper.

• No concepts are published for this paper.

• Hybrid Adaptive Intrusion Prevention

  2011cited by this paper
• Research Statement 1 Automatic Signature Generation for Polymorphic Worms

  2006cited by this paper
• Hamsa: fast signature generation for zero-day polymorphic worms with provable attack resilience

  2006cited by this paper
• Packet vaccine: black-box exploit detection and signature generation

  2006cited by this paper
• DIRA: Automatic Detection, Identification and Repair of Control-Hijacking Attacks

  2005cited by this paper
• Anomalous Payload-Based Worm Detection and Signature Generation

  2005cited by this paper
• Detection and prevention of stack buffer overflow attacks

  2005cited by this paper
• Semantics-aware malware detection

  2005cited by this paper
• Polygraph: automatically generating signatures for polymorphic worms

  2005cited by this paper
• Efficient Techniques for Comprehensive Protection from Memory Error Exploits

  2005cited by this paper
• Polymorphic Worm Detection Using Structural Information of Executables

  2005cited by this paper
• FLIPS: Hybrid Adaptive Intrusion Prevention

  2005cited by this paper
• Vigilante: end-to-end containment of internet worms

  2005cited by this paper
• Fast and automated generation of attack signatures: a basis for building self-protecting servers

  2005influential reference
• A Fast Static Analysis Approach to Detect Exploit Code Inside Network Flows

  2005influential reference
• Automatic generation of buffer overflow attack signatures: an approach based on program behavior models

  2005influential reference
• e-NeXSh: achieving an effectively non-executable stack and heap via system-call policing

  2005cited by this paper
• Automatic diagnosis and response to memory corruption vulnerabilities

  2005cited by this paper
• The EarlyBird System for Real-time Detection of Unknown Worms

  2005cited by this paper
• Dynamic Taint Analysis for Automatic Detection, Analysis, and SignatureGeneration of Exploits on Commodity Software

  2005cited by this paper
• Advanced Polymorphic Worms: Evading IDS by Blending in with Normal Traffic

  2005cited by this paper
• Fast portscan detection using sequential hypothesis testing

  2004cited by this paper
• Characteristics of internet background radiation

  2004cited by this paper
• Stack Shape Analysis to Detect Obfuscated calls in Binaries

  2004cited by this paper
• Static Disassembly of Obfuscated Binaries

  2004cited by this paper
• Beyond stack smashing: recent advances in exploiting buffer overruns

  2004cited by this paper
• Model Checking One Million Lines of C Code

  2004cited by this paper
• Shield: vulnerability-driven network filters for preventing known vulnerability exploits

  2004cited by this paper
• Side Effects Are Not Sufficient to Authenticate Software

  2004cited by this paper
• Anomalous Payload-Based Network Intrusion Detection

  2004cited by this paper
• Abstract Stack Graph to Detect Obfuscated Calls in Binaries

  2004cited by this paper
• Adding distribution to existing applications by means of aspect oriented programming

  2004cited by this paper
• A processor architecture defense against buffer overflow attacks

  2003cited by this paper
• Obfuscation of executable code to improve resistance to static disassembly

  2003cited by this paper
• Intrusion detection: Randomized instruction set emulation to disrupt binary code injection attacks

  2003cited by this paper
• Countering code-injection attacks with instruction-set randomization

  2003cited by this paper
• Static Analysis of Executables to Detect Malicious Patterns

  2003cited by this paper
• Improving Security Using Extensible Lightweight Static Analysis

  2002cited by this paper
• Disassembly of executable code revisited

  2002cited by this paper
• Secure Execution via Program Shepherding

  2002cited by this paper
• Accurate Buffer Overflow Detection via Abstract Payload Execution

  2002cited by this paper
• RAD: a compile-time solution to buffer overflow attacks

  2001cited by this paper
• Transparent Run-Time Defense Against Stack-Smashing Attacks

  2000cited by this paper
• A First Step Towards Automated Detection of Buffer Overrun Vulnerabilities

  2000cited by this paper
• StackGuard: Automatic Adaptive Detection and Prevention of Buffer-Overflow Attacks

  1998cited by this paper
• A Taxonomy of Obfuscating Transformations

  1997cited by this paper
• Introduction to algorithms

  1996cited by this paper
• Detection of Data Flow Anomaly Through Program Instrumentation

  1979cited by this paper
• Data Flow Analysis in Software Reliability

  1976influential reference

• Research on Cyber Attacks and Defensive Measures of Power Communication Network

  2023cites this paper
• Buffer Overflow Detection and Avoidance Technique

  2023cites this paper
• A simple countermeasure to mitigate buffer overflow attack using minimalistic hardware-integrated software simulation for FPGA

  2022cites this paper
• A Survey of Binary Code Fingerprinting Approaches: Taxonomy, Methodologies, and Features

  2022cites this paper
• CloudShield: Real-time Anomaly Detection in the Cloud

  2021cites this paper
• Binary Analysis Overview

  2020cites this paper
• BLATTA: Early Exploit Detection on Network Traffic with Recurrent Neural Networks

  2020cites this paper
• Binary Code Fingerprinting for Cybersecurity: Application to Malicious Code Fingerprinting

  2020cites this paper
• DeepReturn: A deep neural network can learn how to detect previously-unseen ROP payloads without using any heuristics

  2020cites this paper
• Survey on Web Application Vulnerability

  2019cites this paper
• Buffer Overflow Attack

  2019cites this paper
• Panoramic View of Cloud Storage Security Attacks: an Insight and Security Approaches

  2019cites this paper
• ROPNN: Detection of ROP Payloads Using Deep Neural Networks

  2018influential citation
• Fuzz Testing in Stack-Based Buffer Overflow

  2018cites this paper
• ROPNN: Detection of ROP Payloads Using Deep Neural Networks

  2018cites this paper
• A novel privacy preserving user identification approach for network traffic

  2017cites this paper
• Mitigating Control Flow Attacks in Embedded Systems with Novel Built-in Secure Register Bank

  2017cites this paper
• Fatal injection: a survey of modern code injection attack countermeasures

  2017cites this paper
• Detection of vulnerabilities and automatic protection for web applications

  2016cites this paper
• Code-Stop: Code-Reuse Prevention By Context-Aware Traffic Proxying

  2016cites this paper
• ICIMP 2016 Proceedings

  2016cites this paper
• Detecting and Removing Web Application Vulnerabilities with Static Analysis and Data Mining

  2016cites this paper
• Accurate shellcode recognition from network traffic data using artificial neural nets

  2015cites this paper
• Hybrid User-level Sandboxing of Third-party Android Apps

  2015cites this paper
• Defeat scanning worms in cyber warfare

  2015cites this paper
• Buffer Overflow Vulnerability Prediction from x86 Executables Using Static Analysis and Machine Learning

  2015cites this paper
• Automatic detection and correction of web application vulnerabilities using data mining to predict false positives

  2014cites this paper
• A European Network of Excellence in Managing Threats and Vulnerabilities in the Future Internet: Europe for the World y

  2014cites this paper
• SafeBrowsingCloud: Detecting Drive-by-Downloads Attack Using Cloud Computing Environment

  2014cites this paper
• Defeating buffer overflow attacks via virtualization

  2014cites this paper
• eavesROP: Listening for ROP Payloads in Data Streams

  2014cites this paper
• SigFree: A Signature-Free Buffer Overrun and Overflow Attack Blocker

  2014cites this paper
• CodeXt: Automatic Extraction of Obfuscated Attack Code from Memory Dump

  2014cites this paper
• A Survey on Conducting Vulnerability Assessment in Web-Based Application

  2014cites this paper
• ARMORY: An automatic security testing tool for buffer overflow defect detection

  2013cites this paper
• Detecting machine-morphed malware variants via engine attribution

  2013cites this paper
• Semantic aware attribution analysis of remote exploits

  2013influential citation
• A Signature-Free Buffer Overflow Attack Blocker Using Genetic Programming

  2013influential citation
• Administrative evaluation of intrusion detection system

  2013cites this paper
• Using instruction sequence abstraction for shellcode detection and attribution

  2013cites this paper
• Server-Side Code Injection Attacks: A Historical Perspective

  2013cites this paper
• Buffer Overflow Attack Detection In Peer To Peer Network Using MCAIDS

  2013cites this paper
• Hide and seek: worms digging at the Internet backbones and edges

  2013cites this paper
• WAP: Automatic Detection and Correction of Web Application Vulnerabilities

  2013cites this paper
• Analysis of signature and signature free bufferoverflow detection for gif and jpg format

  2013cites this paper
• Buffer Overflow Attack Blocking Using MCAIDS- Machine Code Analysis Intrusion Detection System

  2013cites this paper
• Signature Generation Based on Executable Parts in Suspicious Packets

  2013cites this paper
• JSGuard: Shellcode Detection in JavaScript

  2012influential citation
• Detection of Malicious Code-Injection Attack Using Two Phase Analysis Technique

  2012cites this paper
• A Semantic-aware method for polymorphic signature generation

  2012cites this paper
• Usage of Variable Structure Congestion Control Protocol (VCP) in Buffer Overflow Attack Blocker

  2012cites this paper
• A framework and theory for cyber security assessments

  2012cites this paper
• Flaw and Configuration Analysis of Cloud Component Using First Order Logic

  2012cites this paper
• Prevention o Prevention o Prevention o Prevention of Buffer f Buffer f Buffer f Buffer overflow Attack overflow Attack overflow Attack overflow Attack BlockerBlockerBlockerBlocker Using IDS Using IDS Using IDS Using IDS

  2012cites this paper
• Using information flow tracking to protect legacy binaries

  2012cites this paper
• Detecting repackaged smartphone applications in third-party android marketplaces

  2012cites this paper
• Sans Signature Buffer Overflow Blocker

  2012cites this paper
• Defending against Buffer-Overflow Vulnerabilities

  2011cites this paper
• A study of self-propagating mal-packets in sensor networks: Attacks and defenses

  2011cites this paper
• ROP payload detection using speculative code execution

  2011cites this paper
• SA3: Automatic Semantic Aware Attribution Analysis of Remote Exploits

  2011influential citation
• Classification of packet contents for malware detection

  2011cites this paper
• A Robust Kernel-Based Solution to Control-Hijacking Buffer Overflow Attacks

  2011cites this paper
• Countering Code Injection Attacks: A Unified Approach

  2011cites this paper
• AutoDunt: Dynamic Latent Dependence Analysis for Detection of Zero Day Vulnerability

  2011cites this paper
• Buffer Overflow Attack - Vulnerability in Stack

  2011cites this paper
• On Approaches for Detection and Resolution of Buffer Overflow Attacks

  2010cites this paper
• Malicious Shellcode Detection with Virtual Memory Snapshots

  2010influential citation
• Comprehensive shellcode detection using runtime heuristics

  2010cites this paper
• Efficient Detection of the Return-Oriented Programming Malicious Code

  2010cites this paper
• Integrating Offline Analysis and Online Protection to Defeat Buffer Overflow Attacks

  2010cites this paper
• SAS: semantics aware signature generation for polymorphic worm detection

  2010cites this paper
• KIDS - Keyed Intrusion Detection System

  2010cites this paper
• Yataglass: Network-Level Code Emulation for Analyzing Memory-Scanning Attacks

  2009cites this paper
• Computer Worms: Architectures, Evasion Strategies, and Detection Mechanisms

  2009cites this paper
• Racewalk: Fast Instruction Frequency Analysis and Classification for Shellcode Detection in Network Flow

  2009cites this paper
• Generic detection of code injection attacks using network-level emulation

  2009influential citation
• Validation Methods of Suspicious Network Flows for Unknown Attack Detection

  2009cites this paper
• Spectrogram: A Mixture-of-Markov-Chains Model for Anomaly Detection in Web Traffic

  2009cites this paper
• DROP: Detecting Return-Oriented Programming Malicious Code

  2009cites this paper
• Self-Healing Control Flow Protection in Sensor Applications

  2009cites this paper
• Lightweight Static Analysis to Detect Polymorphic Exploit Code with Static Analysis Resistant Technique

  2009influential citation
• Anomaly detection in the case of message oriented middleware

  2008cites this paper
• STILL: Exploit Code Detection via Static Taint and Initialization Analyses

  2008cites this paper
• Fast and Black-box Exploit Detection and Signature Generation for Commodity Software

  2008cites this paper
• Improving sensor network immunity under worm attacks: a software diversity approach

  2008cites this paper
• Packet inspection for application classification and intrusion detection

  2008cites this paper
• Protecting web services from remote exploit code: a static analysis approach

  2008influential citation
• Detection, propagation modeling and designing of advanced Internet worms

  2008influential citation
• Swarm Attacks against Network-Level Emulation/Analysis

  2008influential citation
• NIDS based on payload word frequencies and anomaly of transitions

  2008cites this paper
• Detecting Remote Exploits Using Data Mining

  2008influential citation
• Execution Trace-Driven Automated Attack Signature Generation

  2008cites this paper
• Towards self-propagate mal-packets in sensor networks

  2008cites this paper
• Tracing Stored Program Counter to Detect Polymorphic Shellcode

  2008cites this paper
• Vigilante: End-to-end containment of Internet worm epidemics

  2008cites this paper
• Analysis of Maximum Executable Length for Detecting Text-Based Malware

  2008cites this paper
• Function Call Mechanism Based Executable Code Detection for the Network Security

  2008cites this paper
• Detecting energy-greedy anomalies and mobile malware variants

  2008cites this paper
• Executable Code Recognition in Network Flows Using Instruction Transition Probabilities

  2008cites this paper