{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,5]],"date-time":"2026-10-05T15:19:18Z","timestamp":1791213558877,"version":"4.1.0"},"publisher-location":"Berlin, Heidelberg","reference-count":113,"publisher":"Springer Berlin Heidelberg","isbn-type":[{"value":"9783642333378","type":"print"},{"value":"9783642333385","type":"electronic"}],"license":[{"start":{"date-parts":[[2012,1,1]],"date-time":"2012-01-01T00:00:00Z","timestamp":1325376000000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2012]]},"DOI":"10.1007\/978-3-642-33338-5_5","type":"book-chapter","created":{"date-parts":[[2012,9,25]],"date-time":"2012-09-25T21:17:07Z","timestamp":1348607827000},"page":"86-106","source":"Crossref","is-referenced-by-count":93,"title":["Memory Errors: The Past, the Present, and the Future"],"prefix":"10.1007","author":[{"given":"Victor","family":"van der Veen","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Nitish","family":"dutt-Sharma","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Lorenzo","family":"Cavallaro","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Herbert","family":"Bos","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","reference":[{"key":"5_CR1","unstructured":"Afek, J., Sharabani, A.: Dangling Pointer, Smashing the Pointer for Fun and Profit. In: Blackhat, USA (2007)"},{"key":"5_CR2","unstructured":"Akritidis, P.: Cling: A memory allocator to mitigate dangling pointers. In: Proceedings of the 19th USENIX Conference on Security (2010)"},{"key":"5_CR3","unstructured":"Akritidis, P., Costa, M., Castro, M., Hand, S.: Baggy bounds checking: an efficient and backwards-compatible defense against out-of-bounds errors. In: Proceedings of the 18th Conference on USENIX Security Symposium (2009)"},{"key":"5_CR4","unstructured":"Aleph: Smashing The Stack For Fun And Profit. Phrack Magazine (November 1996)"},{"key":"5_CR5","doi-asserted-by":"crossref","unstructured":"Anderson, J.P.: Computer Security Technology Planning Study, vol. 2 (October 1972)","DOI":"10.21236\/AD0772806"},{"key":"5_CR6","unstructured":"Anisimov, A.: Defeating Microsoft Windows XP SP2 Heap protection and DEP bypass (January 2005)"},{"key":"5_CR7","unstructured":"Anonymous: Once Upon a Free. Phrack Magazine (August 2001)"},{"key":"5_CR8","doi-asserted-by":"crossref","unstructured":"Barrantes, E.G., Ackley, D.H., Forrest, S., Stefanovi, D.: Randomized instruction set emulation. ACM TISSEC (2005)","DOI":"10.1145\/1053283.1053286"},{"key":"5_CR9","doi-asserted-by":"crossref","unstructured":"Basili, V.R., Perricone, B.T.: Software errors and complexity: an empirical investigation. CACM (1984)","DOI":"10.1145\/69605.2085"},{"key":"5_CR10","unstructured":"Becher, M., Freiling, F.C., Hoffmann, J., Holz, T., Uellenbeck, S., Wolf, C.: Mobile security catching up? In: IEEE S&P (2011)"},{"key":"5_CR11","unstructured":"Bhatkar, S., Sekar, R., DuVarney, D.C.: Efficient techniques for comprehensive protection from memory error exploits. In: USENIX Security Symposium (August 2005)"},{"key":"5_CR12","unstructured":"blackngel: Malloc Des-Maleficarum. Phrack Magazine (June 2009)"},{"key":"5_CR13","unstructured":"blackngel: The House Of Lore: Reloaded. Phrack Magazine (November 2010)"},{"key":"5_CR14","unstructured":"Blazakis, D.: Interpreter Exploitation. In: Proceedings of the 4th USENIX Conference on Offensive Technologies (2010)"},{"key":"5_CR15","unstructured":"BlueHat, M.: Microsoft BlueHat Prize Contest (2011)"},{"key":"5_CR16","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1007\/978-3-642-23644-0_1","volume-title":"Recent Advances in Intrusion Detection","author":"E. Bosman","year":"2011","unstructured":"Bosman, E., Slowinska, A., Bos, H.: Minemu: The World\u2019s Fastest Taint Tracker. In: Sommer, R., Balzarotti, D., Maier, G. (eds.) RAID 2011. LNCS, vol.\u00a06961, pp. 1\u201320. Springer, Heidelberg (2011)"},{"key":"5_CR17","unstructured":"Bray, B.: Compiler Security Checks In Depth (February 2002)"},{"key":"5_CR18","doi-asserted-by":"crossref","unstructured":"Brumley, D., Poosankam, P., Song, D., Zheng, J.: Automatic patch-based exploit generation is possible: Techniques and implications. In: Proceedings of the 2008 IEEE Symposium on Security and Privacy (2008)","DOI":"10.1109\/SP.2008.17"},{"key":"5_CR19","doi-asserted-by":"crossref","unstructured":"Bruschi, D., Cavallaro, L., Lanzi, A.: Diversified Process Replicae for Defeating Memory Error Exploits. In: Intern. Workshop on Assurance, WIA (2007)","DOI":"10.1109\/PCCC.2007.358924"},{"key":"5_CR20","unstructured":"BugTraq: Wu-Ftpd Remote Format String Stack Overwrite Vulnerability (June 2000)"},{"key":"5_CR21","unstructured":"Bulba, Kil3r: Bypassing StackGuard and StackShield. Phrack Magazine (January 2000)"},{"key":"5_CR22","unstructured":"CERT Coordination Center: The CERT FAQ (January 2011)"},{"key":"5_CR23","unstructured":"Chen, S., Xu, J., Sezer, E.C., Gauriar, P., Iyer, R.K.: Non-control-data attacks are realistic threats. In: USENIX Sec. Symposium (2005)"},{"key":"5_CR24","unstructured":"Christey, S., Martin, R.A.: Vulnerability Type Distributions in CVE (May 2007)"},{"key":"5_CR25","unstructured":"Cker Chiueh, T., Hau Hsu, F.: Rad: A compile-time solution to buffer overflow attacks. In: ICDCS (2001)"},{"key":"5_CR26","unstructured":"Conover, M., Horovitz, O.: Windows Heap Exploitation (Win2KSP0 through WinXPSP2). In: SyScan (December 2004)"},{"key":"5_CR27","unstructured":"Conover, M.: w00w00 Security\u00a0Team: w00w00 on Heap Overflows (January 1999)"},{"key":"5_CR28","unstructured":"Cowan, C., Barringer, M., Beattie, S., Kroah-Hartman, G.: FormatGuard: Automatic Protection From printf Format String Vulnerabilities. In: USENIX Security Symposium (August 2001)"},{"key":"5_CR29","unstructured":"Cowan, C., Pu, C., Maier, D., Hintongif, H., Walpole, J., Bakke, P., Beattie, S., Grier, A., Wagle, P., Zhang, Q.: StackGuard: Automatic Adaptive Detection and Prevention of Buffer-Overflow Attacks. In: Proceedings of the 7th USENIX Security Symposium (January 1998)"},{"key":"5_CR30","unstructured":"Cox, B., Evans, D., Filipi, A., Rowanhill, J., Hu, W., Davidson, J., Knight, J., Nguyen-Tuong, A., Hiser, J.: N-variant systems: a secretless framework for security through diversity. In: USENIX Security Symposium (2006)"},{"key":"5_CR31","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"346","DOI":"10.1007\/978-3-642-18178-8_30","volume-title":"Information Security","author":"L. Davi","year":"2011","unstructured":"Davi, L., Dmitrienko, A., Sadeghi, A.-R., Winandy, M.: Privilege Escalation Attacks on Android. In: Burmester, M., Tsudik, G., Magliveras, S., Ili\u0107, I. (eds.) ISC 2010. LNCS, vol.\u00a06531, pp. 346\u2013360. Springer, Heidelberg (2011)"},{"key":"5_CR32","unstructured":"de Raadt, T.: Exploit Mitigation Techniques (in OpenBSD, of course) (November 2005)"},{"key":"5_CR33","unstructured":"Designer, S.: Getting around non-executable stack (and fix) (August 1997)"},{"key":"5_CR34","unstructured":"Designer, S.: Linux kernel patch to remove stack exec permission (April 1997)"},{"key":"5_CR35","unstructured":"Designer, S.: JPEG COM Marker Processing Vulnerability (July 2000)"},{"key":"5_CR36","unstructured":"DilDog: L0pht Advisory MSIE4.0(1) (January 1998)"},{"key":"5_CR37","unstructured":"Dowd, M.: Application-Specific Attacks: Leveraging the ActionScript Virtual Machine (April 2008)"},{"key":"5_CR38","unstructured":"Durden, T.: Bypassing PaX ASLR Protection. Phrack Magazine (July 2002)"},{"key":"5_CR39","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"88","DOI":"10.1007\/978-3-642-02918-9_6","volume-title":"Detection of Intrusions and Malware, and Vulnerability Assessment","author":"M. Egele","year":"2009","unstructured":"Egele, M., Wurzinger, P., Kruegel, C., Kirda, E.: Defending Browsers against Drive-by Downloads: Mitigating Heap-Spraying Code Injection Attacks. In: Flegel, U., Bruschi, D. (eds.) DIMVA 2009. LNCS, vol.\u00a05587, pp. 88\u2013106. Springer, Heidelberg (2009)"},{"key":"5_CR40","unstructured":"Etoh, H., Yoda, K.: Protecting from stack-smashing attacks (June 2000)"},{"key":"5_CR41","unstructured":"Fewer, S.: Pwn2Own 2011: IE8 on Windows 7 hijacked with 3 vulnerabilities (May 2011)"},{"key":"5_CR42","unstructured":"Fisher, D.: Survey Shows Most Flaws Sold For $5,000 Or Less (May 2010)"},{"key":"5_CR43","unstructured":"Fisher, D.: Chaouki Bekrar: The Man Behind the Bugs (March 2012)"},{"key":"5_CR44","unstructured":"Fisher, D.: Offense is Being Pushed Underground (March 2012)"},{"key":"5_CR45","unstructured":"Flake, H.: Third Generation Exploits. In: Blackhat USA Windows Security (February 2002)"},{"key":"5_CR46","unstructured":"Flake, H.: Exploitation and State Machines: Programming the \u201cweird machine\u201d revisited (April 2011)"},{"key":"5_CR47","doi-asserted-by":"crossref","unstructured":"Fresi-Roglia, G., Martignoni, L., Paleari, R., Bruschi, D.: Surgically returning to randomized lib(c). In: ACSAC (December 2009)","DOI":"10.1109\/ACSAC.2009.16"},{"key":"5_CR48","unstructured":"Giuffrida, C., Kuijsten, A., Tanenbaum, A.S.: Enhanced Operating System Security Through Efficient and Fine-grained Address Space Randomization. In: Proceedings of the 21th USENIX Conference on Security (2012)"},{"key":"5_CR49","unstructured":"Goodin, D.: Legal goons threaten researcher for reporting security bug (2011)"},{"key":"5_CR50","unstructured":"Guido, D.: Vulnerability Disclosure (2011)"},{"key":"5_CR51","unstructured":"Hawkes, B.: Attacking the Vista Heap. Blackhat, USA (August 2008)"},{"key":"5_CR52","doi-asserted-by":"crossref","unstructured":"Hiser, J., Nguyen-Tuong, A., Co, M., Hall, M., Davidson, J.W.: ILR: Where\u2019d My Gadgets Go? In: Proceedings of the 2012 IEEE Symposium on Security and Privacy (2012)","DOI":"10.1109\/SP.2012.39"},{"key":"5_CR53","unstructured":"Jim, T., Morrisett, G., Grossman, D., Hicks, M., Cheney, J., Wang, Y.: Cyclone: A safe dialect of c. In: USENIX ATC (2002)"},{"key":"5_CR54","unstructured":"Jones, R.W.M., Kelly, P.H.J., Most, C., Errors, U.: Backwards-compatible bounds checking for arrays and pointers in c programs. In: Third International Workshop on Automated Debugging (1997)"},{"key":"5_CR55","unstructured":"jp: Advanced Doug lea\u2019s malloc exploits. Phrack Magazine (August 2003)"},{"key":"5_CR56","doi-asserted-by":"crossref","unstructured":"Kc, G.S., Keromytis, A.D., Prevelakis, V.: Countering Code-Injection Attacks With Instruction-Set Randomization (October 2003)","DOI":"10.1145\/948109.948146"},{"key":"5_CR57","unstructured":"Kononenko, S.: Remote root vulnerability in Exim (December 2010)"},{"key":"5_CR58","unstructured":"Krahmer, S.: x86-64 buffer overflow exploits and the borrowed code chunks exploitation technique (September 2005)"},{"key":"5_CR59","unstructured":"Labs, M.S.: Security Labs Report, July - December 2011 Recap (Februay 2012)"},{"key":"5_CR60","unstructured":"Lemos, R.: Does Microsoft Need Bug Bounties? (May 2011)"},{"key":"5_CR61","unstructured":"Litchfield, D.: Defeating the Stack Based Buffer Overflow Prevention Mechanism of Microsoft Windows 2003 Server. In: Blackhat, Asia (December 2003)"},{"key":"5_CR62","doi-asserted-by":"crossref","unstructured":"Litchfield, D.: Windows Heap Overflows. In: Blackhat USA Windows Security (January 2004)","DOI":"10.1016\/S1353-4858(04)00022-4"},{"key":"5_CR63","unstructured":"Lopatic, T.: Vulnerability in NCSA HTTPD 1.3 (Februay 1995)"},{"key":"5_CR64","unstructured":"Marinescu, A.: Windows Vista Heap Management Enhancements. In: Blackhat, USA (August 2006)"},{"key":"5_CR65","unstructured":"MaXX: VUDO Malloc Tricks. Phrack Magazine (August 2001)"},{"key":"5_CR66","unstructured":"McDonald, J.: Defeating Solaris\/SPARC Non-Executable Stack Protection) (March 1999)"},{"key":"5_CR67","unstructured":"McDonald, J., Valasek, C.: Practical Windows XP\/2003 Heap Exploitation. Blackhat, USA (July 2009)"},{"key":"5_CR68","unstructured":"Meer, H.: Memory Corruption Attacks The (almost) Complete History. In: Blackhat, USA (July 2010)"},{"key":"5_CR69","unstructured":"Mein, A.: Celebrating one year of web vulnerability research (2012)"},{"key":"5_CR70","unstructured":"Microsoft: A detailed description of the Data Execution Prevention (DEP) feature in Windows XP Service Pack 2, Windows XP Tablet PC Edition 2005, and Windows Server 2003 (September 2006)"},{"key":"5_CR71","unstructured":"Miller, M.: Preventing the Exploitation of SEH Overwrites (September 2006)"},{"key":"5_CR72","doi-asserted-by":"crossref","unstructured":"Necula, G.C., Condit, J., Harren, M., Mcpeak, S., Weimer, W.: Ccured: Type-safe retrofitting of legacy software. ACM Trans. on Progr. Lang. and Syst (2005)","DOI":"10.1145\/1065887.1065892"},{"key":"5_CR73","unstructured":"Nergal: The Advanced Return-Into-Lib(c) exploits (PaX Case study). Phrack Magazine (December 2001)"},{"key":"5_CR74","unstructured":"NIST: The Second Static Analysis Tool Exposition (SATE) 2009 (June 2010)"},{"key":"5_CR75","doi-asserted-by":"crossref","unstructured":"Okun, V., Guthrie, W.F., Gaucher, R., Black, P.E.: Effect of static analysis tools on software security: preliminary investigation. In: Proceedings of the 2007 ACM Workshop on Quality of Protection (2007)","DOI":"10.1145\/1314257.1314260"},{"key":"5_CR76","doi-asserted-by":"crossref","unstructured":"Ostrand, T.J., Weyuker, E.J.: The distribution of faults in a large industrial software system. In: ISSTA (2002)","DOI":"10.1145\/566172.566181"},{"key":"5_CR77","doi-asserted-by":"crossref","unstructured":"Pappas, V., Polychronakis, M., Keromytis, A.D.: Smashing the Gadgets: Hindering Return-Oriented Programming Using In-Place Code Randomization. In: Proceedings of the 2012 IEEE Symposium on Security and Privacy (2012)","DOI":"10.1109\/SP.2012.41"},{"key":"5_CR78","unstructured":"Phantasmagoria, P.: The Malloc Maleficarum (October 2005)"},{"key":"5_CR79","unstructured":"Planet, C.: A Eulogy for Format Strings. Phrack (November 2010)"},{"key":"5_CR80","doi-asserted-by":"crossref","unstructured":"Polychronakis, M., Anagnostakis, K.G., Markatos, E.P.: Comprehensive shellcode detection using runtime heuristics. In: ACSAC (2010)","DOI":"10.1145\/1920261.1920305"},{"key":"5_CR81","unstructured":"Richarte, G.: Four different tricks to bypass StackShield and StackGuard protection (June 2002)"},{"key":"5_CR82","unstructured":"Ruwase, O., Lam, M.: A practical dynamic buffer overflow detector. In: Proceedings of NDSS Symposium (February 2004)"},{"key":"5_CR83","unstructured":"Roemer, R., Erik\u00a0Buchanan, H.S., Savage, S.: Return-Oriented Programming: Systems, Languages, and Applications. ACM TISSEC (April 2010)"},{"key":"5_CR84","doi-asserted-by":"crossref","unstructured":"Salamat, B., Jackson, T., Gal, A., Franz, M.: Orchestra: Intrusion Detection Using Parallel Execution and Monitoring of Program Variants in User-Space. In: EuroSys (2009)","DOI":"10.1145\/1519065.1519071"},{"key":"5_CR85","unstructured":"SANS: CWE\/SANS TOP 25 Most Dangerous Software Errors (June 2011)"},{"key":"5_CR86","unstructured":"Schmidt, C., Darby, T.: The What, Why, and How of the 1988 Internet Worm (July 2001)"},{"key":"5_CR87","unstructured":"Scut: Exploiting Format String Vulnerabilities (September 2001)"},{"key":"5_CR88","unstructured":"Seifried, K., Levy, E.: Interview with Elias Levy (Bugtraq) (2001)"},{"key":"5_CR89","unstructured":"Serna, F.J.: CVE-2012-0769, the case of the perfect info leak (February 2012)"},{"key":"5_CR90","doi-asserted-by":"crossref","unstructured":"Shacham, H., Page, M., Pfaff, B., Goh, E.J., Modadugu, N., Boneh, D.: On the Effectiveness of Address-Space Randomization. In: ACM CCS (October 2004)","DOI":"10.1145\/1030083.1030124"},{"key":"5_CR91","unstructured":"SkyLined: Internet Exploiter 3: Technical details (November 2004)"},{"key":"5_CR92","unstructured":"SkyLined: Internet Explorer IFRAME src&name parameter BoF remote compromise (October 2004)"},{"key":"5_CR93","unstructured":"SkyLined: Microsoft Internet Explorer DHTML Object handling vulnerabilities (MS05-20) (April 2005)"},{"key":"5_CR94","unstructured":"Slowinska, A., Stancescu, T., Bos, H.: Howard: a dynamic excavator for reverse engineering data structures. In: Proceedings of NDSS 2011, San Diego, CA (2011)"},{"key":"5_CR95","unstructured":"Slowinska, A., Stancescu, T., Bos, H.: Body armor for binaries: preventing buffer overflows without recompilation. In: Proceedings of the USENIX Security Symposium (2012)"},{"key":"5_CR96","unstructured":"StackShield: Stack Shield: A \u201dstack smashing\u201d technique protection tool for Linux (December 1999)"},{"key":"5_CR97","unstructured":"Symantec: Symantec report on the underground economy (2008)"},{"key":"5_CR98","unstructured":"Team, P.: Address Space Layout Randomization (March 2003)"},{"key":"5_CR99","unstructured":"The Pax Team: Design & Implementation of PAGEEXEC (2000)"},{"key":"5_CR100","unstructured":"Theriault, C.: Why is a 14-month-old patched Microsoft vulnerability still being exploited? (February 2012)"},{"key":"5_CR101","unstructured":"Twillman, T.: Exploit for proftpd 1.2.0pre6 (September 1999)"},{"key":"5_CR102","doi-asserted-by":"crossref","unstructured":"van der Veen, V., dutt Sharma, N., Cavallaro, L., Bos, H.: Memory Errors: The Past, the Present, and the Future. Technical Report IR-CS-73 (November 2011)","DOI":"10.1007\/978-3-642-33338-5_5"},{"key":"5_CR103","unstructured":"Veracode: State of Software Security Report, vol. 4 (December 2011)"},{"key":"5_CR104","unstructured":"VUPEN: Safari\/MacBook first to fall at Pwn2Own (March 2011)"},{"key":"5_CR105","unstructured":"VUPEN: Pwn2Own 2012: Google Chrome browser sandbox first to fall (March 2012)"},{"key":"5_CR106","unstructured":"VUPEN: Pwn2Own 2012: IE 9 hacked with two 0day vulnerabilities (March 2012)"},{"key":"5_CR107","unstructured":"Waisman, N.: Understanding and Bypassing Windows Heap Protection (June 2007)"},{"key":"5_CR108","doi-asserted-by":"crossref","unstructured":"Wei, T., Wang, T., Duan, L., Luo, J.: Secure dynamic code generation against spraying. In: ACM CCS (2010)","DOI":"10.1145\/1866307.1866415"},{"key":"5_CR109","unstructured":"X-Force, I.: IBM X-Force 2011 Mid-year Trend and Risk Report (September 2011)"},{"key":"5_CR110","unstructured":"Younan, Y., Joosen, W., Piessens, F.: Code injection in C and C++: A Survey of Vulnerabilities and Countermeasures. Technical Report CW386 (July 2004)"},{"key":"5_CR111","doi-asserted-by":"crossref","unstructured":"Younan, Y., Philippaerts, P., Cavallaro, L., Sekar, R., Piessens, F., Joosen, W.: PAriCheck: an efficient pointer arithmetic checker for c programs. In: AsiaCCS (2010)","DOI":"10.1145\/1755688.1755707"},{"key":"5_CR112","unstructured":"Zatko, P.: How to write Buffer Overflows (1995)"},{"key":"5_CR113","unstructured":"Zetter, K.: Three minutes with rain forrest puppy (2001)"}],"container-title":["Lecture Notes in Computer Science","Research in Attacks, Intrusions, and Defenses"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-642-33338-5_5","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,1,29]],"date-time":"2022-01-29T11:12:51Z","timestamp":1643454771000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-642-33338-5_5"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2012]]},"ISBN":["9783642333378","9783642333385"],"references-count":113,"URL":"https:\/\/doi.org\/10.1007\/978-3-642-33338-5_5","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2012]]}}}