Software Security More standard (input) security problems & countermeasures

Аннотация

Security problems seen so far • memory corruption (incl. buffer overflow) • integer overflow – possibly to create buffer overflow • format string attacks • OS command injection - in PREfast example int execute([SA_Pre(Tainted=SA_No)]char *buf) { return system(buf); // pass buf as command to be executed by the OS } • data races – in lecture on Safety There are many more…