Answered step by step
Verified Expert Solution
Question
1 Approved Answer
Instead of push return address onto the same stack that's mixed together with data (e.g., local variable: buffers), the CPU will push it to a
Instead of push return address onto the same stack that's mixed together with data (e.g., local variable: buffers), the CPU will push it to a dedicated stack that stores only the return address. Similarly, when ret instruction is invoked, the CPU will automatically pop from the dedicated stack. This way, a buffer overflow will overflow the stack that no longer stores the return address and therefore all return-oriented buffer overflow attacks are automatically prevented (impossible to occur). 1. Is the above strategy secure? If not, give one counterexample. (1.5 points) 2. Give one other reason (security or non-security reason) why this approach may not be desirable. (1.5 points) 3. Suggest any idea to improve the design to make it more secure or more practical? (3 bonus points)
Step by Step Solution
There are 3 Steps involved in it
Step: 1
Get Instant Access to Expert-Tailored Solutions
See step-by-step solutions with expert insights and AI powered tools for academic success
Step: 2
Step: 3
Ace Your Homework with AI
Get the answers you need in no time with our AI-driven, step-by-step assistance
Get Started