Explain the buffer overflow problem. Give one real life example of buffer overflow attacks (research on the web). Buffer overflow problem occurs when a program or process attempts to write more data to a fixed length block of memory. This vulnerability has a potential cause of a system crash, or a possible opportunity to being a cyberattack. A buffer can be defined as a sequential section of memory allocated to contain anything from a character string to an array of integers. Buffer overflow happens when there is more data in a buffer than the allocated memory can handle and causing data overflow into adjacent storage. The extra information which has to go somewhere can overflow into adjacent memory space, corrupting or overwriting the data held in that space. Secure development practices should include regular testing to detect and fix buffer overflows. These practices include automatic protection at the language level and bounds-checking at run-time.

Computer Networking: A Top-Down Approach (7th Edition)
7th Edition
ISBN:9780133594140
Author:James Kurose, Keith Ross
Publisher:James Kurose, Keith Ross
Chapter1: Computer Networks And The Internet
Section: Chapter Questions
Problem R1RQ: What is the difference between a host and an end system? List several different types of end...
icon
Related questions
Question

Answer it plz

Explain the buffer overflow problem.
Give one real life example of buffer overflow attacks (research on the web).
Buffer overflow problem occurs when a program or process attempts to write more data to a fixed length
block of memory. This vulnerability has a potential cause of a system crash, or a possible opportunity to
being a cyberattack. A buffer can be defined as a sequential section of memory allocated to contain
anything from a character string to an array of integers. Buffer overflow happens when there is more
data in a buffer than the allocated memory can handle and causing data overflow into adjacent storage.
The extra information which has to go somewhere can overflow into adjacent memory space, corrupting
or overwriting the data held in that space. Secure development practices should include regular testing
to detect and fix buffer overflows. These practices include automatic protection at the language level
and bounds-checking at run-time.
The Blaster worm that attacked Microsoft Windows Systems in August 2003 relied upon a known buffer
overflow in remote procedure call facilities. Once it was installed on a given computer, Blaster would
attempt to find other vulnerable computers. Upon finding a vulnerable computer, Blaster would issue
instructions that would create a process on the target and cause the worm to be downloaded to
it. CERT® Advisory CA-2003-20 W32/Blaster worm http://www.cert.org/advisories/CA-2003-20.html
Transcribed Image Text:Explain the buffer overflow problem. Give one real life example of buffer overflow attacks (research on the web). Buffer overflow problem occurs when a program or process attempts to write more data to a fixed length block of memory. This vulnerability has a potential cause of a system crash, or a possible opportunity to being a cyberattack. A buffer can be defined as a sequential section of memory allocated to contain anything from a character string to an array of integers. Buffer overflow happens when there is more data in a buffer than the allocated memory can handle and causing data overflow into adjacent storage. The extra information which has to go somewhere can overflow into adjacent memory space, corrupting or overwriting the data held in that space. Secure development practices should include regular testing to detect and fix buffer overflows. These practices include automatic protection at the language level and bounds-checking at run-time. The Blaster worm that attacked Microsoft Windows Systems in August 2003 relied upon a known buffer overflow in remote procedure call facilities. Once it was installed on a given computer, Blaster would attempt to find other vulnerable computers. Upon finding a vulnerable computer, Blaster would issue instructions that would create a process on the target and cause the worm to be downloaded to it. CERT® Advisory CA-2003-20 W32/Blaster worm http://www.cert.org/advisories/CA-2003-20.html
Expert Solution
steps

Step by step

Solved in 2 steps

Blurred answer
Recommended textbooks for you
Computer Networking: A Top-Down Approach (7th Edi…
Computer Networking: A Top-Down Approach (7th Edi…
Computer Engineering
ISBN:
9780133594140
Author:
James Kurose, Keith Ross
Publisher:
PEARSON
Computer Organization and Design MIPS Edition, Fi…
Computer Organization and Design MIPS Edition, Fi…
Computer Engineering
ISBN:
9780124077263
Author:
David A. Patterson, John L. Hennessy
Publisher:
Elsevier Science
Network+ Guide to Networks (MindTap Course List)
Network+ Guide to Networks (MindTap Course List)
Computer Engineering
ISBN:
9781337569330
Author:
Jill West, Tamara Dean, Jean Andrews
Publisher:
Cengage Learning
Concepts of Database Management
Concepts of Database Management
Computer Engineering
ISBN:
9781337093422
Author:
Joy L. Starks, Philip J. Pratt, Mary Z. Last
Publisher:
Cengage Learning
Prelude to Programming
Prelude to Programming
Computer Engineering
ISBN:
9780133750423
Author:
VENIT, Stewart
Publisher:
Pearson Education
Sc Business Data Communications and Networking, T…
Sc Business Data Communications and Networking, T…
Computer Engineering
ISBN:
9781119368830
Author:
FITZGERALD
Publisher:
WILEY