See my lecture notes: http://security.cs.rpi.edu/courses/hwre-spring2014/Lecture9_...