Research on Stack Protection Technology Based on GCC Plugin

Buffer overflow attack is one of the main vulnerabilities in the computer.In all areas, the most likely to attack is the program stack.In order to enforce the GCC stack overflow protection, which is not enough to defense the byte guess attack.On the basis of the latest plug-in provided by GCC, a stack protection enhancement plug-in is proposed and used as a compilation optimization process for the back end of the GCC compiler.The final experimental results show that the new compiler optimization pass, to some extent, increasing the difficulty of the attacker to guessing the canary, which using byte for byte brute force attack.And the plugin can effectively alleviate the shortage of the GCC stack smashing protection.