缓冲区溢出攻击及对策  

Buffer Overflow Attacks and Way of Countermeasures

作　　者：姬秀荔[1] 

机构地区：[1]安阳工学院计算机工程系,安阳455000

出　　处：《微计算机应用》2005年第4期488-490,共3页Microcomputer Applications

摘　　要：缓冲区溢出总是和安全相关,由于缓冲区溢出会引出许多安全漏洞。因此它是目前Internet危害最大、最广泛的一种攻击手段。本文通过对缓冲区溢出攻击原理的分析探讨了通过写安全的代码,使堆栈执行无效及动态运行时检查等几种防范缓冲区溢出的措施。这些措施只能减少被攻击的可能性,还不能完全解决缓冲区溢出的问题。Buffer Overflow is related with system safety,because buffer overflow may cause many safe loopholes, now it is the most dangerous and popular internet attacking way. This article analyzes the principle of buffer overflow attacks,and then tells us some ways against butter overflow. For example,we can write by safe cods to make stack useless, or keep checking when it is in dynamic mode. While these measures can only reduce the possibility of being attacked , they cannot totally resolve the problem.

关 键 词：缓冲区溢出攻击 INTERNET 安全漏洞 攻击手段 攻击原理 动态运行 可能性 完全解 代码 堆栈 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术] TP393.4[自动化与计算机技术—计算机科学与技术]