Engineering Heap Overflow Exploits with JavaScript

No abstract is available for this paper.

• Publication year

  2008

• Venue

  Workshop on Offensive Technologies

• Publication date

  2008-07-28

• Fields of study

  Computer Science, Engineering

• Identifiers

  No identifiers available.

• External record

  Open on Semantic Scholar

• Source metadata

  Semantic Scholar

• No claims are published for this paper.

• No concepts are published for this paper.

• No references are available for this paper.

• Revealing the exploitability of heap overflow through PoC analysis

  2024cites this paper
• Top of the Heap: Efficient Memory Error Protection of Safe Heap Objects

  2023cites this paper
• Automated Use-After-Free Detection and Exploit Mitigation: How Far Have We Gone?

  2022cites this paper
• Glyph: Efficient ML-Based Detection of Heap Spraying Attacks

  2021cites this paper
• HeapSafe: Securing Unprotected Heaps in RISC-V

  2021cites this paper
• ExpRace: Exploiting Kernel Races through Raising Interrupts

  2021cites this paper
• UAFSan: an object-identifier-based dynamic approach for detecting use-after-free vulnerabilities

  2021cites this paper
• Efficient machine learning for attack detection

  2020cites this paper
• A Survey of Exploitation Techniques and Defenses for Program Data Attacks

  2020cites this paper
• Mpchecker: Use-After-Free Vulnerabilities Protection Based on Multi-Level Pointers

  2019cites this paper
• Security and Privacy in Communication Networks: 15th EAI International Conference, SecureComm 2019, Orlando, FL, USA, October 23-25, 2019, Proceedings, Part I

  2019influential citation
• ChaffyScript: Vulnerability-Agnostic Defense of JavaScript Exploits via Memory Perturbation

  2019cites this paper
• CRCount: Pointer Invalidation with Reference Counting to Mitigate Use-after-free in Legacy C/C++

  2019cites this paper
• JSPRE: A Large-Scale Detection of Malicious JavaScript Code Based on Pre-filter

  2018cites this paper
• Mitigating Use-after-Free Attack Using Library Considering Size and Number of Freed Memory

  2018cites this paper
• Protection from Within: Runtime Hardening Techniques for COTS Binaries

  2017cites this paper
• Towards Efficient Heap Overflow Discovery

  2017cites this paper
• DETECTION, DIAGNOSIS AND MITIGATION OF MALICIOUS JAVASCRIPT WITH ENRICHED JAVASCRIPT EXECUTIONS

  2017cites this paper
• Eternal War in Software Security: A Survey of Control Flow Protection

  2017cites this paper
• Strict Virtual Call Integrity Checking for C++ Binaries

  2017cites this paper
• Protecting computer systems through eliminating or analyzing vulnerabilities

  2016cites this paper
• Micro-Virtualization Memory Tracing to Detect and Prevent Spraying Attacks

  2016cites this paper
• — Technical Report — Analyzing and Detecting Flash-based Malware using Lightweight MultiPath Exploration

  2016cites this paper
• Preventing exploits against memory corruption vulnerabilities

  2016cites this paper
• Defeating code reuse attacks with minimal tagged architecture

  2015cites this paper
• Micro-Policies: Formally Verified, Tag-Based Security Monitors

  2015cites this paper
• Preventing Use-after-free with Dangling Pointers Nullification

  2015cites this paper
• JITScope: Protecting web users from control-flow hijacking attacks

  2015cites this paper
• Type Casting Verification: Stopping an Emerging Attack Vector

  2015cites this paper
• Exploiting and Protecting Dynamic Code Generation

  2015cites this paper
• Cyber Attack Thread: A control-flow based approach to deconstruct and mitigate cyber threats

  2015cites this paper
• Preventing Exploits Against Software of Uncertain Provenance (PEASOUP)

  2015cites this paper
• Useamman monitorin web-sovellukset: tekniset haasteet ja mahdollisuudet

  2014cites this paper
• Static-Dynamic Control Flow Integrity

  2014cites this paper
• Targeted Cyber Attacks: Multi-staged Attacks Driven by Exploits and Malware

  2014cites this paper
• TASEL: dynamic taint analysis with selective control dependency

  2014cites this paper
• Secure multi-execution of web scripts: Theory and practice

  2014cites this paper
• Data Privacy Management and Autonomous Spontaneous Security

  2014cites this paper
• Towards automated integrity protection of C++ virtual function tables in binary programs

  2014cites this paper
• POSTER: UAFChecker: Scalable Static Detection of Use-After-Free Vulnerabilities

  2014cites this paper
• Advanced Detection Tool for PDF Threats

  2013cites this paper
• Virtualisation-Based Security Countermeasures in Software Runtime Systems

  2013cites this paper
• Defending against Heap Overflow by Using Randomization in Nested Virtual Clusters

  2013cites this paper
• Analyzing and defending against web-based malware

  2013influential citation
• Protecting function pointers in binary

  2013cites this paper
• Practical Control Flow Integrity and Randomization for Binary Executables

  2013cites this paper
• Rethinking web platform extensibility

  2013cites this paper
• Gibraltar: Exposing Hardware Devices to Web Pages Using AJAX

  2012cites this paper
• Automatic Simplification of Obfuscated JavaScript Code: A Semantics-Based Approach

  2012cites this paper
• A survey on automated dynamic malware-analysis techniques and tools

  2012cites this paper
• Atomizer: Fast, Scalable and Lightweight Heap Analyzer for Virtual Machines in a Cloud Environment

  2012cites this paper
• FlowFox: a web browser with flexible and precise information flow control

  2012cites this paper
• Intelligent Defense against Malicious JavaScript Code

  2012cites this paper
• Table of Contents Message from the Workshop Chair Message from the Program Chair Organizing Committee Program Committee Using Architecture to Reason about Information Security

  2012cites this paper
• Autonomous learning for detection of JavaScript attacks: vision or reality?

  2012cites this paper
• Atlantis: robust, extensible execution environments for web applications

  2011cites this paper
• Web Security: A Survey of Latest Trends in Security Attacks

  2011cites this paper
• Detection of Smartphone Malware

  2011cites this paper
• Heap Taichi: exploiting memory allocation granularity in heap-spraying attacks

  2010cites this paper
• BuBBle: A Javascript Engine Level Countermeasure against Heap-Spraying Attacks

  2010cites this paper
• Preventing drive-by download via inter-module communication monitoring

  2010cites this paper
• Detection and analysis of drive-by-download attacks and malicious JavaScript code

  2010cites this paper
• Cujo: efficient detection and prevention of drive-by-download attacks

  2010cites this paper
• Security Conference for the Next Generation DRIVE-BY DOWNLOAD ATTACKS : EFFECTS AND DETECTION METHODS

  2009cites this paper
• iNetSec 2009 – Open Research Problems in Network Security: IFIP WG 11.4 International Workshop, Zurich, Switzerland, April 23-24, 2009, Revised Selected Papers

  2009cites this paper
• Defending Browsers against Drive-by Downloads: Mitigating Heap-Spraying Code Injection Attacks

  2009cites this paper
• Mitigating Drive-By Download Attacks: Challenges and Open Problems

  2009cites this paper
• MODELING EXPLOITS IN TARGETED ATTACKS

  year unknowncites this paper