Preventing Buffer Overflow Attacks With Reliable and Low Cost System
Detection of data flow anomalies there are static or dynamic methods to detect data flow anomalies in the software reliability and testing field. Static methods are not suitable in the case due to its slow speed; dynamic methods are not suitable either due to the need for real execution of a program with some inputs. Their scheme is rule-based, whereas SigFree is a generic approach which does not require any pre-known patterns. Then, it uses the found patterns and a data flow analysis technique called program slicing to analyze the packet's payload to see if the packet really contains code four rules (or cases) are discussed in this paper.