What is the fundamental reason of introducing \"Data Execution Prevention\" (DEP

Question

What is the fundamental reason of introducing "Data Execution Prevention" (DEP) defense?

(A). In overflow attack, the payload often overwrites other memory addresses besides the control related address such as return address. Through DEP, we can stop it.

(B). DEP can make the attack non predictable

(C). Introducing DEP can make return into libc impossible

(D). Shell code from user input often needs to be located in the data regions (e.g., stack) and they also need to be executed. DEP can use writable but not executable page property to stop it.

Explanation / Answer

(A). In overflow attack, the payload often overwrites other memory addresses besides the control related address such as return address. Through DEP, we can stop it.

Related Questions

Navigate

• Browse (All)
• Browse W
• Subjects

Integrity-first tutoring: explanations and feedback only — we do not complete graded work. Learn more.