Ben Livshits and Ben Zorn - Heap Spraying Attack Detection with Nozzle
- Posted: Mar 25, 2009 at 10:11 AM
- 25,065 Views
Download
How do I download the videos?
- To download, right click the file type you would like and pick “Save target as…” or “Save link as…”
Why should I download videos from Channel9?
- It's an easy way to save the videos you like locally.
- You can save the videos in order to watch them offline.
- If all you want is to hear the audio, you can download the MP3!
Which version should I choose?
- If you want to view the video on your PC, Xbox or Media Center, download the High Quality WMV file (this is the highest quality version we have available).
- If you'd like a lower bitrate version, to reduce the download time or cost, then choose the Medium Quality WMV file.
- If you have a Zune, WP7, iPhone, iPad, or iPod device, choose the low or medium MP4 file.
- If you just want to hear the audio of the video, choose the MP3 file.
Right click “Save as…”
- High Quality WMV (PC, Xbox, MCE)
- MP3 (Audio only)
- MP4 (iPod, Zune HD)
- Mid Quality WMV (Lo-band, Mobile)
Ben Livshits and Ben Zorn talk about
Nozzle, a new tool to detect heap spraying attacks, a new security attack that significantly increases the exploitability of existing memory corruption errors in type unsafe applications.
Ben^2 give us a quick course on the basics of heap spraying attacks and a demo of Nozzle in action. Nozzle is a runtime monitoring tool that watches the 'health' of your browser and detects attempts of heap spraying attacks.
- Nozzle: http://research.microsoft.com/nozzle
- Nozzle Tech Report: http://research.microsoft.com/pubs/76528/tr-2008-176.pdf
The Research in Software Engineering team (RiSE) coordinates Microsoft's research in Software Engineering in Redmond, USA.
Comments Closed
Comments have been closed since this content was published more than 30 days ago, but if you'd like to continue the conversation, please create a new thread in our Forums,
or Contact Us and let us know.