Re: IIS Remote Exploit (injection code)

• To: BUGTRAQ@netspace.org
• Subject: Re: IIS Remote Exploit (injection code)
• From: Dug Song <dugsong@MONKEY.ORG>
• Date: Wed, 16 Jun 1999 16:40:25 -0400
• Approved-By: aleph1@UNDERGROUND.ORG
• Sender: Bugtraq List <BUGTRAQ@netspace.org>

On Wed, 16 Jun 1999, Ethan Benatan wrote:

> Very true, and this is a terrifically important message to get out...
> Diversity makes for resilience, and vice versa.

see stephanie forrest's work on computer immunology:

        http://www.cs.unm.edu/~immsec/

and to a lesser extent, random "canary" values in StackGuard:

        http://www.cse.ogi.edu/DISC/projects/immunix/StackGuard/

and the introduction of randomness to defeat race attacks, predictable
sequence number attacks, etc. in OpenBSD:

        http://www.openbsd.org/crypto.html
-d.

---
http://www.monkey.org/~dugsong/