Giving Students a View of Buffer Overflow with Readily Available Tools

• DOI: 10.18260/1-2--43812
• Publication Date: 2024-02-07T12:31:42Z
• Authors: Cheryl Resch
• Keywords: Buffer overflow; Call stack; Debugger; Code (set theory); Buffer (optical fiber)

Abstract Buffer overflow is one of the most common vulnerabilities reported by Common Vulnerabilities and Exposures (CVE) program. Giving students a mental model how buffer works dangerous these are may instill in them commitment to avoiding future. stack frames known be difficult concept for understand. This experience report describes assignment which use free open-source emulator debugger exploit view effect on memory. The steps through assembling C program vulnerable emulator, running debugger, exploiting function causing overflow, then examining registers memory see overflow. Students guided overwriting return address saved with arbitrary code run. We provide instructions questions that must answer. 591 Computer Organization course Fall 2022 were required complete assignment. Over 90% could identify input data when viewing 80% caused register corrupted cause crash. 64% 42% correctly interpret boundaries frames. These results give insight into effectiveness parts also responded reflection prompt "What was surprising or interesting part this activity." responses analyzed themes, usefulness visualizing understanding concepts prevalence publicly available code, easy it vulnerability. Thus, shows promise helping understand concept, emphasizing importance vulnerabilities.