Goal
@@ -129,6 +129,34 @@ managed such a success is the lpd advisory that Secure Networks put out.
New Technologies
+ +As we audit source code, we often invent new ways of solving problems. +Sometimes these ideas have been used before in some random application +written somewhere, but perhaps not taken to the degree that we do. +
+ +
-
+
- strlcpy() and strlcat() +
- Memory protection purify
+
-
+
- W^X +
- .rodata segment +
- Guard pages +
- Randomized malloc() +
- Randomized mmap() +
- atexit() and stdio protection +
- Privilege seperation +
- Privilege revocation +
- Chroot jailing +
- New uids +
- ProPolice +
- ... and others +
+
The Reward
Our proactive auditing process has really paid off. Statements like @@ -1169,7 +1197,7 @@
www@openbsd.org
-$OpenBSD: security.html,v 1.277 2004/03/17 22:22:05 millert Exp $ +$OpenBSD: security.html,v 1.278 2004/03/24 07:36:29 deraadt Exp $