Paper Clip Productions

Return Address Modification Buffer Overflow Protection Method

Here is an interesting anti-virus method based highly on some of my original Function Hacker work. I pursued this project as a course project in undergrad and it was never submitted for review. It applies code-inject to add protection code at runtime.

• G. L. McDonald and J. Aycock, “Code-injection based runtime method for the prevention and detection of return address modification buffer overflow attacks,” unpublished, December 2008