@Buffer Overflow Attack
- Recognized as the most dangerous security hole, especially cases when we can find them in network service servers.
- Major course for intrusion
- Anyone can stop the service servers from the Internet
- Try to make gprocess crash (core dump)h
- Implanting gshell codeh
- Obtain backdoor access with administrator privilege
- Reported buffer overflow found in many service servers
- wuftp, Netscape Enterprise Server, Microsoft IIS, c.
- Caused by functions in standard library that do not make boundary check of memory assignment.
- Internet Worm (1988) used this method, so quite classic but canft be eliminated