{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,1]],"date-time":"2026-04-01T18:47:34Z","timestamp":1775069254481,"version":"3.50.1"},"publisher-location":"Berlin, Heidelberg","reference-count":23,"publisher":"Springer Berlin Heidelberg","isbn-type":[{"value":"9783540001645","type":"print"},{"value":"9783540361596","type":"electronic"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2002]]},"DOI":"10.1007\/3-540-36159-6_3","type":"book-chapter","created":{"date-parts":[[2007,8,28]],"date-time":"2007-08-28T10:06:48Z","timestamp":1188295608000},"page":"25-36","source":"Crossref","is-referenced-by-count":7,"title":["Encoding Function Pointers and Memory Arrangement Checking against Buffer Overflow Attack"],"prefix":"10.1007","author":[{"given":"Changwoo","family":"Pyo","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Gyungho","family":"Lee","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2002,12,16]]},"reference":[{"key":"3_CR1","unstructured":"Aleph One. Smashing The Stack For Fun And Profit. Phrack Magazine, 7(49):File 14, 1996."},{"key":"3_CR2","doi-asserted-by":"crossref","unstructured":"Todd M. Austin, Scott E. Breach, and Gurindar S. Sohi. Efficient Detection of All Pointer and Array Access Errors. In Proceedings of the SIGPLAN\u2019 94 Conference on Programming Language Design and Implementation, 1994.","DOI":"10.1145\/178243.178446"},{"key":"3_CR3","unstructured":"Arash Baratloo, Navjot Singh, and Timothy Tsai. Transparent Run-Time Defense Against Stack Smashing Attacks. In Proceedings of the USENIX Annual Technical Conference, June 2000."},{"key":"3_CR4","unstructured":"Bulba and Kil3r. BYPASSING STACKGUARD AND STACKSHIELD. Phrack Magazine, 10(56), May 2000."},{"key":"3_CR5","unstructured":"CERT Coordination Center. CERT Advisory CA-1996-26: Deanial-of-Service Attack via ping. \n                    http:\/\/www.cert.org\/advisories\/CA-1996-26.html\n                    \n                  , Dec 1996."},{"key":"3_CR6","unstructured":"Tzi-Cker Chiueh and Fu-Hau Hsu. RAD: A Compile-Time Solution to Buffer Overflow Attacks. In 21st International Conference on Distributed Computing Systems, 2001."},{"key":"3_CR7","unstructured":"CORE SECURITY TECHNOLOGIES Inc. Multiple Vulnerabilities in Stack Smashing Protection Technologies. Security Focus Online, Apr. 2002."},{"key":"3_CR8","unstructured":"Crispin Cowan, Steve Beattie, Ryan Finnin Day, Calton Pu, Perry Wagle, and Erik Walthinsen. Protecting Systems from Stack Smashing Attacks with StackGuard. In the Linux Expo, 1999."},{"key":"3_CR9","unstructured":"Crispin Cowan, Calton Pu, David Maier, Heather Hinton, Peat Bakke, Steve Beattie, Aaron Grier, Perry Wagle, and Qian Zhang. StackGuard: Automatic Detection and Prevention of Buffer-Overflow Attacks. In the 7th USENIX Security Symposium, 1998."},{"key":"3_CR10","unstructured":"Crispin Cowan, Perry Wagle, Calton Pu, Steve Beattie, and Jonathan Walpole. Buffer Overflows: Attacks and Defenses for the Vulnerability of the Decade. In the DARPA Information Survivability Conference and Expo DISCEX, 1999."},{"key":"3_CR11","unstructured":"Roman Danyliw and Allen Householder. CERT Advisory CA-2001-19: Code Red Worm Exploiting Buffer Overflow In IIS Indexing Service DLL. \n                    http:\/\/www.cert.org\/advisories\/CA-2001-19.html\n                    \n                  , Jul 2001."},{"key":"3_CR12","unstructured":"Roman Danyliw and Allen Householder. CERT Advisory CA-2001-23: Continued Threat of the Code Red Worm. \n                    http:\/\/www.cert.org\/advisories\/CA-2001-23.html\n                    \n                  , Jul 2001."},{"key":"3_CR13","doi-asserted-by":"crossref","unstructured":"M. W. Eichin and J. A. Rochlis. With Microscope and Tweezers: An Analysis of the Internet Virus of November 1988. In Proc. IEEE Symposium on Security and Privacy, pages 326\u2013343, 1989.","DOI":"10.1109\/SECPRI.1989.36307"},{"key":"3_CR14","unstructured":"Samuel P. Harbison and Guy L. Steele Jr. C, A Reference Manual. Prentice Hall, 4th edition, 1995."},{"key":"3_CR15","unstructured":"R. W. M. Jones and P. H. J. Kelly. Backwards-compatible bounds checking for arrays and pointers in C programs. In Proceedings of the Third International Workshop on Automated Debugging, 1997."},{"key":"3_CR16","unstructured":"David Larochelle and David Evans. Statically Detecting Likely Buffer Overflow Vulnerabilities. In 2001 USENIX Security Symposium, 2001."},{"key":"3_CR17","unstructured":"Gyungho Lee and Akhilesh Tyagi. Encoded Program Counter: Self-Protection from Buffer Overflow. In International Conference on Internet Computing, Jun. 2000."},{"key":"3_CR18","unstructured":"Mindcraft. Webstone standard web server benchmark. \n                    http:\/\/www.mindcraft.com\/webstone\n                    \n                  ."},{"key":"3_CR19","unstructured":"Mudge. How to Write Buffer Overflows. \n                    http:\/\/www.insecure.org\/stf\/mudge_buffer_overflow_tutorial.html\n                    \n                  , 1995."},{"key":"3_CR20","unstructured":"Unix System Laboratories. System V Application Binary Interface: Intel386 Architecture Processor Supplement. Prentice Hall, 3rd edition, Jan 1994."},{"key":"3_CR21","doi-asserted-by":"crossref","unstructured":"J. Viega, J. T. Bloch, T. Kohno, and G. McGraw. ITS4: A Static Vulnerability Scanner for C and C++ Code. In Proceedings of Annual Computer Security Applications Conference, Dec 2000.","DOI":"10.1109\/ACSAC.2000.898880"},{"key":"3_CR22","unstructured":"David Wagner, Jeffrey S. Foster, Eric A. Brewer, and Alexander Aiken. A First Step Towards Automated Detection of Buffer Overrun Vulnerabilities. In Network and Distributed System Security Symposium, Feb 2000."},{"key":"3_CR23","unstructured":"Mariusz Woloszyn. StackGuard Mechanism: Emsi\u2019s Vulnerability. \n                    http:\/\/immunix.org\/StackGuard\/emi_vuln.html\n                    \n                   1999"}],"container-title":["Lecture Notes in Computer Science","Information and Communications Security"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/3-540-36159-6_3","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,2,22]],"date-time":"2019-02-22T22:47:05Z","timestamp":1550875625000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/3-540-36159-6_3"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2002]]},"ISBN":["9783540001645","9783540361596"],"references-count":23,"URL":"https:\/\/doi.org\/10.1007\/3-540-36159-6_3","relation":{},"ISSN":["0302-9743"],"issn-type":[{"value":"0302-9743","type":"print"}],"subject":[],"published":{"date-parts":[[2002]]}}}