The Endless War in Memory: A Retrospective on Defenses Against Binary Threats
summary
A retrospective on 35+ years of buffer overflow defenses, surveying technologies developed to eliminate memory-based binary exploits. It covers historical and modern mitigation techniques (e.g., compiler hardening, ASLR, DEP, sandboxing and runtime checks) and evaluates why buffer-overflow vulnerabilities persist despite these defenses.
AI-written summary · about
chapters (8)
- 0:00Mitigations introduction
- 5:35Memory corruption basics
- 11:21Stack overflow protections
- 19:20Heap corruption defenses
- 28:25Static data protection
- 31:11Control Flow Integrity
- 41:34Hardware solutions
- 43:22Q&A
related talks
45mThe endless war in memory: security without slowdowns
50mBuffer Overflow Demystified
52mKernel Hardening: Ten Years Deep
01h 26mEmbracing an Adversarial Mindset for C++ Security
01h 00mIntroduction to memory exploitation
34mGetting on the Same (Virtual Memory) Page: A Roundtable on Data-only Attack Mitigations
51mThe Anatomy of an Exploit
01h 06mSecurity Beyond Memory Safety - Using Modern C++ to Avoid Vulnerabilities by Design