Integer overflow vulnerability will cause buffer overflow. The research on the relationship between them will help us to detect integer overflow vulnerability. We present a dynamic analysis methods RICB （Run-time Int...Integer overflow vulnerability will cause buffer overflow. The research on the relationship between them will help us to detect integer overflow vulnerability. We present a dynamic analysis methods RICB （Run-time Integer Checking via Buffer overflow）. Our approach includes decompile execute file to assembly language; debug the execute file step into and step out; locate the overflow points and checking buffer overflow caused by integer overflow. We have implemented our approach in three buffer overflow types： format string overflow, stack overflow and heap overflow. Experiments results show that our approach is effective and efficient. We have detected more than 5 known integer overflow vulnerabilities via buffer overflow.展开更多
The way of intercepting Windows DLL functions against buffer overflow attacks is evaluated. It＇s produced at the expense of hooking vulnerable DLL functions by addition of check code. If the return address in the sta...The way of intercepting Windows DLL functions against buffer overflow attacks is evaluated. It＇s produced at the expense of hooking vulnerable DLL functions by addition of check code. If the return address in the stack belongs to a heap or stack page, the call is from illicit code and the program is terminated. The signature of malicious code is recorded, so it is possible for the next attack to be filtered out. The return-into-libc attacks are detected by comparing the entry address of DLL functions with the overwritten return address in the stack. The presented method interrupts the execution of malicious code and prevents the system from being hijacked when these intercepted DLL functions are invoked in the context of buffer overflow.展开更多
Drill string will sustain large uplift force during the shut-in period after gas overflow in an ultra-deep well, and in serious case, it will run out of the wellhead. A calculation model of uplift force was establishe...Drill string will sustain large uplift force during the shut-in period after gas overflow in an ultra-deep well, and in serious case, it will run out of the wellhead. A calculation model of uplift force was established to analyze dynamic change characteristics of the uplift force of drill string during the shut-in period, and then a management procedure for the uplift risk during the shut-in period after gas overflow in the ultra-deep well was formed. Cross section method and pressure area method were used to analyze the force on drill string after shut-in of well, it was found that the source of uplift force was the "fictitious force" caused by the hydrostatic pressure in the well. When the fictitious force is in the opposite direction to the gravity, it is the uplift force. By adopting the theory of annular multiphase flow, considering the effects of wellbore afterflow and gas slippage, the dynamic change of the pressure and fluid in the wellbore and the uplift force of drill string during the shut-in period were analyzed. The magnitude and direction of uplift force are related to the length of drill string in the wellbore and shut-in time, and there is the risk of uplift of drill string when the length of drill string in the wellbore is smaller than the critical drill string length or the shut in time exceeds the critical shut in time. A set of treatment method and process to prevent the uplift of drill string is advanced during the shut-in period after overflow in the ultra-deep well, which makes the risk management of the drill string uplift in the ultra-deep well more rigorous and scientific.展开更多
基金Supported by the National Natural Science Foundation of China （60903188）, Shanghai Education Commission Innovation Foundation （11YZ192） and World Expo Science and Technology Special Fund of Shanghai Science and Technology Commission （08dz0580202）.
文摘Integer overflow vulnerability will cause buffer overflow. The research on the relationship between them will help us to detect integer overflow vulnerability. We present a dynamic analysis methods RICB （Run-time Integer Checking via Buffer overflow）. Our approach includes decompile execute file to assembly language; debug the execute file step into and step out; locate the overflow points and checking buffer overflow caused by integer overflow. We have implemented our approach in three buffer overflow types： format string overflow, stack overflow and heap overflow. Experiments results show that our approach is effective and efficient. We have detected more than 5 known integer overflow vulnerabilities via buffer overflow.
文摘The way of intercepting Windows DLL functions against buffer overflow attacks is evaluated. It＇s produced at the expense of hooking vulnerable DLL functions by addition of check code. If the return address in the stack belongs to a heap or stack page, the call is from illicit code and the program is terminated. The signature of malicious code is recorded, so it is possible for the next attack to be filtered out. The return-into-libc attacks are detected by comparing the entry address of DLL functions with the overwritten return address in the stack. The presented method interrupts the execution of malicious code and prevents the system from being hijacked when these intercepted DLL functions are invoked in the context of buffer overflow.
基金Supported by China National Science and Technology Major Project(2016ZX05020-006)
文摘Drill string will sustain large uplift force during the shut-in period after gas overflow in an ultra-deep well, and in serious case, it will run out of the wellhead. A calculation model of uplift force was established to analyze dynamic change characteristics of the uplift force of drill string during the shut-in period, and then a management procedure for the uplift risk during the shut-in period after gas overflow in the ultra-deep well was formed. Cross section method and pressure area method were used to analyze the force on drill string after shut-in of well, it was found that the source of uplift force was the "fictitious force" caused by the hydrostatic pressure in the well. When the fictitious force is in the opposite direction to the gravity, it is the uplift force. By adopting the theory of annular multiphase flow, considering the effects of wellbore afterflow and gas slippage, the dynamic change of the pressure and fluid in the wellbore and the uplift force of drill string during the shut-in period were analyzed. The magnitude and direction of uplift force are related to the length of drill string in the wellbore and shut-in time, and there is the risk of uplift of drill string when the length of drill string in the wellbore is smaller than the critical drill string length or the shut in time exceeds the critical shut in time. A set of treatment method and process to prevent the uplift of drill string is advanced during the shut-in period after overflow in the ultra-deep well, which makes the risk management of the drill string uplift in the ultra-deep well more rigorous and scientific.
