库函数调用的安全性分析  

Analysis on Calling the Lib Function Securely

作　　者：郑玉彤[1] 

机构地区：[1]中央民族大学数学与计算机学院,北京100081

出　　处：《微计算机应用》2006年第3期319-322,共4页Microcomputer Applications

摘　　要：首先介绍缓冲区溢出机制和基于缓冲区溢出的攻击形式,从C程序员的角度讨论了三类常用的库函数在调用时可能引发的安全问题,并详细分析了缓冲区溢出的内在原因及可能被利用的攻击方法。如果在编程时能针对这些库函数的调用有意识地采取应对措施,无疑将减少缓冲区溢出漏洞,提高程序的安全性能。Firstly the paper introduces buffer overflow and the potential attack based on it, then from the view of a C programmer, to discusse program security when three kinds of common used lib functions were called, finally it try to analysis the inner mechanism that cause buffer overflow. It would be helpful to minimize buffer overflow and improve the security of the program if we take actions consciously when calling these llb functions.

关 键 词：缓冲区溢出 库函数 攻击 安全编程 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]