2. Identify code that will perform malicious function when it executes
with program’s privilege
3. Construct input value that will force code to be in program’s address space
4. Execute program in a way that makes it jump to address at which