缓冲区溢出研究综述  

A Survey of Research on Buffer Overflows

作　　者：林志强[1,2] 夏耐[1,2] 茅兵[1,2] 谢立[1,2] 

机构地区：[1]南京大学软件新技术国家重点实验室,南京210093 [2]南京大学计算机科学与技术系,南京210093

出　　处：《计算机科学》2004年第9期110-113,160,共5页Computer Science

基　　金：国家"863"高技术(No:2003AA144010)经费资助

摘　　要：近年来非常流行的极具破坏力的系统攻击是基于缓冲区溢出漏洞的攻击,如今互联网上的绝大多数计算机系统都受着或潜在地受着缓冲区溢出漏洞的威胁。在本文中,我们研究了各种类型的缓冲区溢出漏洞和常见的攻击手段及防御措施,并且对这些研究成果进行了分析总结。最后阐述了我们对此问题的观点。Buffer overflows are getting more and more popular in system security these years,which attack can inflict upon almost arbitrary programs. And as we have known,buffer overflow is one of the most common vulnerabilities that can seriously compromise the security of a network-attached computer system. This paper surveys all kinds of buffer overflows vulnerabilities,the most commonly used attacks,the respective defense methods related to their vulnerabilities,and the comparative summarizations up-to-date researches in this area. At last,we also present our point of view on buffer overflows.

关 键 词：缓冲区溢出 漏洞 攻击手段 计算机系统 互联网 威胁 防御措施 网上 研究综述 观点 

分 类 号：TP393[自动化与计算机技术—计算机应用技术] TP316[自动化与计算机技术—计算机科学与技术]