StackGuard (as used by Immunix), ssp/ProPolice (as used by OpenBSD), and Microsoft's /GS option use _____ defense against buffer overflow attacks.

The correct answer is A. Canary. Canaries or canary words are known values that are placed between a buffer and control data on the stack to monitor buffer overflows. When the buffer overflows, it will clobber the canary, making the overflow evident. This is a reference to the historic practice of using…

System Hacking and Malware

Question

StackGuard (as used by Immunix), ssp/ProPolice (as used by OpenBSD), and Microsoft's /GS option use _____ defense against buffer overflow attacks.

Options

ACanary
BHex editing
CFormat checking
DNon-executing stack

How the community answered

(39 responses)

A
72% (28)
B
5% (2)
C
8% (3)
D
15% (6)

Explanation

Canaries or canary words are known values that are placed between a buffer and control data on the stack to monitor buffer overflows. When the buffer overflows, it will clobber the canary, making the overflow evident. This is a reference to the historic practice of using canaries in coal mines, since they would be affected by toxic gases earlier than the miners, thus providing a biological warning system.

Topics

#buffer overflow#canary protection#stack defense#memory security

Community Discussion

No community discussion yet for this question.

Full CPEH-001 Practice