Driving Home the Buffer Overflow Problem: A Training Module for Programmers and Managers
Repeatedly, news headlines read: "Buffer overflow in vendor’s product allows intruders to take over computer!” This widespread programming mistake is easy to make, exacerbated by the ubiquitous C language, and very simple to exploit. We describe a demonstration (a Java applet) appropriate for a traditional programming course to drive home key points: why buffer overflows occur, how overflows open the door to attackers, and why certain defense mechanisms should be used. The module is in its early stages of experimental use, with a formative evaluation to determine how well the module works and opportunities for its improvement.
The Colloquium™ recognizes that the protection of information and infrastructures that are used to create, store, process, and communicate information is vital to business continuity and security. The goal of The Colloquium™ is to work together to define current and emerging requirements for information assurance education and to influence and encourage the development and expansion of information assurance curricula, especially at the graduate and undergraduate levels.
If you value our mission of service, please consider making a donation, or supporting the organization through charitable pledges.
Recent Posts
29th Colloquium - Presentations
Below are the abstracts and submitted slides for paper presentations at the 29th Colloquium. Article order is alphabetical and features works corresponding to CISSE™ and CCERP tracks. We kindly ask authors and presenters to please consider sending your presentation media to Andrew so they can be included in the conference proceedings.
29th Colloquium - Impact Summary
The 29th Colloquium brought together educators, researchers, industry experts, and government leaders to advance cybersecurity education in an era defined by AI and rapid technological change. This impact summary highlights the reach, participation, and collective achievements that made this year’s event one of our most engaged and successful gatherings this decade.
|
© 2025 CISSE™. All rights reserved. This copyright notice applies only to website content on CISSE.info. It does not apply to the Open Journal platform at CISSE.info/journal. All journal articles are © their respective authors and published under the CC BY 4.0 license. |