Pluralsight is not an official partner or accredited training center of EC-Council. Buffer overflow is a topic that only software developers using low-level programming languages really get an opportunity to fully understand. However, IT security professionals are increasingly called upon to better understand how vulnerabilities created by poor software design and implementation practices can be exploited to create security issues in systems and networks. The problem is that most IT professionals do not have the extensive software development background needed to tackle the subject of buffer overflow. This course breaks down the technical subjects of computer memory management, controlling code, and data inside of a running program, and exploiting poor quality software into terms that IT people with no software development experience can understand. Also examined are ways to prevent buffer overflow conditions and minimize the impact of buffer overflows that do happen. This course is part of the Ethical Hacking Series. http://blog.pluralsight.com/learning-path-ethical-hacking
Author Name: James D. Murray
Author Description:
James D. Murray is an active information security professional and a deprecated software engineer. Mr. Murray started thinking about programming in 1978 when he wrote his first BASIC program on a Commodore PET computer. His first job was building printed circuit boards for the Apple ][ and original IBM PC computers, but he didn’t really consider programming as a possible profession until 1981 after “finding” access to several UNIX systems with C compilers and connected to ARPAnet and BITNET. (Pl… more

Table of Contents

• What Are Buffer Overflows?
  35mins
• Inside Buffer Overflows
  61mins
• Finding Buffer Overflows
  85mins
• Mitigating Buffer Overflows
  60mins