Abstract:

ASLR, SafeSEH and GS Stack Protection are there key technologies for the memory protection mechanism of Windows Vista. Based on the analysis of these technologies,we study their reactions on both general and particular condi- tions, prove the vulnerability in their functions, and then improve these methods,which enhance the practicability and relia- bility of the memory protection mechanism. In addition,we discuss the relationships between the three  technologies.

Key words: ASLR, SafeSEH, GS, exception handling, buffer overflow