Upgrade to Pro — share decks privately, control downloads, hide ads and more …

리눅스 메모리 보호기법, 보안시스템의 이해

Sponsored · Your Podcast. Everywhere. Effortlessly. Share. Educate. Inspire. Entertain. You do you. We'll handle the rest. →
Avatar for Teddy Teddy
September 06, 2017
Technology
0
240

리눅스 메모리 보호기법, 보안시스템의 이해

2013년 코드게이트 국제해킹방어대회 제1회 주니어 행사 때 발표했었던 '리눅스 메모리 보호기법' 에 대한 발표 자료 입니다.

버퍼 오버플로우 (Buffer Overflow) 라는 큰 틀로 내용이 이어지고 그에 대한 공격, 방어 기법에 대한 얘기가 있습니다.

Avatar for Teddy

Teddy

September 06, 2017
Tweet

More Decks by Teddy

See All by Teddy
스타트업 개발자의 이야기 (국민대)
Avatar for Teddy teddykims
1
100
개발자의 인공지능 뽀개기
Avatar for Teddy teddykims
0
160
Git 기초
Avatar for Teddy teddykims
0
83
클라이언트 권한 부여, 인증 시스템, OAuth-JWT
Avatar for Teddy teddykims
0
110
2018.06, 싸이그래머 '심리상담과 IT'
Avatar for Teddy teddykims
0
120
WebSocket, Socket.io
Avatar for Teddy teddykims
1
57
2018.05, 소물, '소프트웨어와 미래 기술'
Avatar for Teddy teddykims
0
82
소프트웨어와 미래 기술 (Software, Future Tech)
Avatar for Teddy teddykims
0
190
무선 네트워크 해킹과 보안 (Network Hacking)
Avatar for Teddy teddykims
0
220

Other Decks in Technology

See All in Technology
猫でもわかるKiro CLI(セキュリティ編)
Avatar for Hiroo Katoh kentapapa
0
110
StrandsとNeptuneを使ってナレッジグラフを構築する
Avatar for やくも yakumo
1
130
茨城の思い出を振り返る ～CDKのセキュリティを添えて～ / 20260201 Mitsutoshi Matsuo
Avatar for SHIFT EVOLVE shift_evolve
PRO
1
410
ランサムウェア対策としてのpnpm導入のススメ
Avatar for Satoru Ishikawa ishikawa_satoru
0
230
AWS DevOps Agent x ECS on Fargate検証 / AWS DevOps Agent x ECS on Fargate
Avatar for Masanori Yamaguchi kinunori
2
180
Context Engineeringの取り組み
Avatar for nutslove nutslove
0
380
旅先で iPad + Neovim で iOS 開発・執筆した話
Avatar for ZOZO Developers zozotech
PRO
0
100
顧客の言葉を、そのまま信じない勇気
Avatar for yamatai12 yamatai1212
1
370
モダンUIでフルサーバーレスなAIエージェントをAmplifyとCDKでサクッとデプロイしよう
Avatar for みのるん minorun365
4
220
~Everything as Codeを諦めない~ 後からCDK
Avatar for mu7889yoon / Yuta Nakamura mu7889yoon
3
510
今こそ学びたいKubernetesネットワーク ～CNIが繋ぐNWとプラットフォームの「フラッと」な対話
Avatar for Takuto Nagami logica0419
5
480
We Built for Predictability; The Workloads Didn’t Care
Avatar for Michael Stahnke stahnma
0
150

Featured

See All Featured
I Don’t Have Time: Getting Over the Fear to Launch Your Podcast
Avatar for Joe Casabona jcasabona
34
2.6k
CSS Pre-Processors: Stylus, Less & Sass
Avatar for Bermon Painter bermonpainter
359
30k
Between Models and Reality
Avatar for mayunak mayunak
1
200
Tell your own story through comics
Avatar for letsgokoyo letsgokoyo
1
810
Building a Modern Day 
E-commerce SEO Strategy
Avatar for Aleyda Solis aleyda
45
8.7k
The Psychology of Web Performance [Beyond Tellerrand 2023]
Avatar for Tammy Everts tammyeverts
49
3.3k
How to Ace a Technical Interview
Avatar for Jacob Kaplan-Moss jacobian
281
24k
SEO Brein meetup: CTRL+C is not how to scale international SEO
Avatar for Linda Hogenes lindahogenes
0
2.4k
For a Future-Friendly Web
Avatar for Brad Frost brad_frost
182
10k
How Fast Is Fast Enough? [PerfNow 2025]
Avatar for Tammy Everts tammyeverts
3
460
JavaScript: Past, Present, and Future - NDC Porto 2020
Avatar for David Neal reverentgeek
52
5.8k
Music & Morning Musume
Avatar for Bryan Veloso bryan
47
7.1k

Transcript

  1. ֿܻझݫݽܻࠁഐӝߨ  ,4*"ࠗ؀಴ӣక਌ YPEOS!TNBSULTJBPSH IUUQGCDPNYPEOS

  2. ೠҴ೟ࢤ*5ো೤,4*"

  3. 4:45&.)"$,*/( .FNPSZ1SPUFDUJPO.FDIBOJTN PG-JOVY

  4. #VGGFS0WFSGMPX   •  ࢎਊ੗оੑ۱ೠؘ੉ఠ੄௼ӝоցޖҗೞৈઁೠ ػߡಌ੄ਊ۝ਸֈ୛ߡ۷ਸٸࢤӝחߡӒܳ੉ਊ ೧೧ఊೞחӝࣿ •  ߡಌஹೊఠ੄઱ӝর੢஖৬઱߸੢஖ࢎ੉ীࢲؘ ੉ఠܳ઱Ҋ߉ਸٸ੿ࠁܳ੐द۽ӝর೧فח੐द੷

    ੢ҕр

  5. #VGGFS0WFSGMPX   •  ࢎਊ੗оੑ۱ೠؘ੉ఠ੄௼ӝоցޖҗೞৈઁೠ ػߡಌ੄ਊ۝ਸֈ୛ߡ۷ਸٸࢤӝחߡӒܳ੉ਊ ೧೧ఊೞחӝࣿ •  ߡಌஹೊఠ੄઱ӝর੢஖৬઱߸੢஖ࢎ੉ীࢲؘ ੉ఠܳ઱Ҋ߉ਸٸ੿ࠁܳ੐द۽ӝর೧فח੐द੷

    ੢ҕр

  6. #VGGFS0WFSGMPX   낮은

  7. #VGGFS0WFSGMPX   낮은

  8. #VGGFS0WFSGMPX   BUFFER SFP RET #6''&3–4'1–3&5–"SHD"SHW–ജ҃߸ࣻ౵ੌݺ

  9. #VGGFS0WFSGMPX   BUFFER SFP RET #6''&3–4'1–3&5–"SHD"SHW–ജ҃߸ࣻ౵ੌݺ """""""""""""""""""

  10. 4UBDL 낮은

  11. 4UBDL 낮은

  12. .FNPSZ ழօ ਬ੷ )*() -08

  13. .FNPSZ ழօ ਬ੷ )*() -08 STACK

  14. #VGGFS0WFSGMPX     #0'ޙઁಽ੉ਬഋ  

  15. #VGGFS0WFSGMPX   JOUNBJO JOUBSHD DIBS BSHW<>  \

  16. #VGGFS0WFSGMPX   JOUNBJO  \

  17. #VGGFS0WFSGMPX  

  18. #65

  19. None
  20. None
  21. None
  22. None
  23. None

  24. .FNPSZ1SPUFDUJPO   %&1 %BUB&YFDVUJPO1SFWFOUJPO 

  25. .FNPSZ1SPUFDUJPO   %&1 %BUB&YFDVUJPO1SFWFOUJPO  BUFFER

  26. .FNPSZ1SPUFDUJPO   %&1 %BUB&YFDVUJPO1SFWFOUJPO  BUFFER

  27. .FNPSZ1SPUFDUJPO   %&1 %BUB&YFDVUJPO1SFWFOUJPO  BUFFER

  28. .FNPSZ1SPUFDUJPO   35- 3FUVSOUPMJCD  BUFFER

  29. .FNPSZ1SPUFDUJPO   35- 3FUVSOUPMJCD  BUFFER SFP RET """""""""""""""""""

  30. .FNPSZ1SPUFDUJPO   35- 3FUVSOUPMJCD  BUFFER SFP RET """""""""""""""""""

    TZTUFN FYFDM CJOTI

  31. .FNPSZ1SPUFDUJPO   "4-3 "EESFTT4QBDF-BZPVU3BOEPNJ[BUJPO  

  32. .FNPSZ1SPUFDUJPO   "4-3 "EESFTT4QBDF-BZPVU3BOEPNJ[BUJPO  

  33. .FNPSZ1SPUFDUJPO   "4-3 "EESFTT4QBDF-BZPVU3BOEPNJ[BUJPO   BUFFER

  34. .FNPSZ1SPUFDUJPO   "4-3 "EESFTT4QBDF-BZPVU3BOEPNJ[BUJPO   BUFFER

  35. .FNPSZ1SPUFDUJPO   "4-3 "EESFTT4QBDF-BZPVU3BOEPNJ[BUJPO   BUFFER

  36. .FNPSZ1SPUFDUJPO   "4-3 "EESFTT4QBDF-BZPVU3BOEPNJ[BUJPO   BUFFER

  37. .FNPSZ1SPUFDUJPO   "4-3 "EESFTT4QBDF-BZPVU3BOEPNJ[BUJPO   BUFFER

  38. .FNPSZ1SPUFDUJPO   "4-3 "EESFTT4QBDF-BZPVU3BOEPNJ[BUJPO   BUFFER

  39. .FNPSZ1SPUFDUJPO   "4-3 "EESFTT4QBDF-BZPVU3BOEPNJ[BUJPO   BUFFER

  40. .FNPSZ1SPUFDUJPO   "4-3 "EESFTT4QBDF-BZPVU3BOEPNJ[BUJPO   BUFFER

  41. .FNPSZ1SPUFDUJPO   "4-3 "EESFTT4QBDF-BZPVU3BOEPNJ[BUJPO   BUFFER

  42. None

  43. ↑҅ࣘ೧ࢲ߄Շח઱ࣗ ↑Ҋ੿ػ઱ࣗ

  44. ↑҅ࣘ೧ࢲ߄Շח઱ࣗ ↑Ҋ੿ػ઱ࣗ

  45. .FNPSZ1SPUFDUJPO   "4$**"SNPS

  46. .FNPSZ1SPUFDUJPO   "4$**"SNPS BUFFER

  47. .FNPSZ1SPUFDUJPO   "4$**"SNPS BUFFER

  48. .FNPSZ1SPUFDUJPO   $BOBSZ   BUFFER SFP RET

  49. .FNPSZ1SPUFDUJPO   $BOBSZ   BUFFER SFP CANARY RET

  50. .FNPSZ1SPUFDUJPO   $BOBSZ   BUFFER SFP CANARY RET

    """""""""" """""

  51. .FNPSZ1SPUFDUJPO   $BOBSZ   CANARY RANDOM

  52. .FNPSZ1SPUFDUJPO   $BOBSZ   CANARY RANDOM TERMINATOR

  53. .FNPSZ1SPUFDUJPO   $BOBSZ   CANARY RANDOM TERMINATOR NULL

  54. DEP

  55. DEP + ASLR

  56. DEP + ASLR + ASCII Armor

  57. DEP + ASLR + ASCII Armor + Canary

  58. ೠҴ೟ࢤ*5ো೤,4*"

  59. None