摘要
提出一种基于动态二进制平台的缓冲区溢出过程分析方法,并实现基于该方法的原型系统。分析缓冲区溢出攻击方法的特点,给出基于异常捕获、控制流分析和内存状态检查的溢出检测方法。通过对内存读写指令、控制转移指令进行监控,获得函数调用序列和数据传递关系,定位导致缓冲区溢出的代码。实验结果表明,该系统能有效检测缓冲区溢出,准确定位导致溢出的代码位置。
This paper proposes an process analysis method for buffer overflow based on dynamic binary platform, and a prototype system based on this method is implemented. According to the principle of buffer overflow attacks, overflow detection method based on exception caught, control flow analysis, and memory status checks is implemented. By monitoring memory read and write, control transfer instructions, system obtains call sequences and data transfer flow. Through analysis of memory data and function calls, orientation code leads to buffer overflow. Experimental results show that the system can detect buffer overflows, and accurate positioning code results in buffer overflow.
出处
《计算机工程》
CAS
CSCD
2012年第6期66-68,71,共4页
Computer Engineering
关键词
缓冲区溢出
动态二进制平台
溢出检测
溢出定位
控制流分析
数据流分析
buffer overflow
dynamic binary platform
overflow detection
overflow positioning
control flow analysis
data flow analysis
作者简介
董鹏程（1985-），男，硕士研究生，主研方向：网络与信息安全
舒辉，副教授、博士
康绯，副教授
王乾，硕士研究生
魏巍，学士
