Security Briefs: Protecting Your Code with Visual C++ Defenses

Stack-based buffer overrun detection is the oldest and most well-known defense available in Visual C++. The goal of the /GS compiler flag is simple: reduce the chance that malicious code will execute correctly. The /GS option is on by default in Visual C+

msdn.microsoft.com