缓冲区溢出攻击原理与防范的研究  

Research on Principle and Defense of Buffer Overflow Attacks

作　　者：王业君[1] 倪惜珍[1] 文伟平[1] 蒋建春[1] 

机构地区：[1]中国科学院软件研究所信息安全技术工程研究中心,北京100080

出　　处：《计算机应用研究》2005年第10期101-104,共4页Application Research of Computers

基　　金：国家自然科学基金资助项目(60083007);国家"973"计划资助项目(G1999035810)

摘　　要：缓冲区溢出攻击是网络攻击事件中最常用的一种攻击方式,成为系统和网络安全中亟待解决的重要问题。在分析缓冲区溢出攻击原理的基础上,说明了攻击的成因,然后描述了目前常见的攻击类型,最后给出了现有的防范措施,进而提出了一种新的通过对编译器及相关系统级函数进行修改来解决该问题的方案。The buffer overflow attacks have been the most common form in the network attacks and become a predominant problem in the system and network security area. After the principle of the buffer overflow attack is explained, this paper analyzes the causes leading to the attacks, Then the usual attack types the attackers often exploit are presented. Last, the common measures to defend these attacks and my own idea about the solution of this problem by modifying the compiler and the relevant functions of the system are given.

关 键 词：缓冲区溢出攻击 系统安全 边界检查 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]