Method and apparatus for protecting against buffer overrun attacks

摘要

A method and an apparatus are disclosed for monitoring and protecting a program system against buffer overrun attacks. The method includes identification of whether there is an unsafe combination of rights for a loaded memory segment; a check to determine whether an unsafe combination of rights is permissible as an exception, and a defense measure, through deletion of the right if there is an unsafe combination of rights and this combination of rights is not permissible. The method also may include a repair measure which repairs the damage which has been caused by the deletion of the right.