突破防护措施的shellcode技术研究  

Study on shellcode breaking through protective measures

作　　者：江亮[1] 王永杰[1] 鲜明[1] 肖顺平[1] 

机构地区：[1]国防科学技术大学电子科学与工程学院,长沙410073

出　　处：《计算机应用研究》2007年第11期146-149,共4页Application Research of Computers

基　　金：国家自然科学基金资助项目(60372039)

摘　　要：缓冲区溢出漏洞是软件系统中存在的最普遍的安全漏洞之一。各种防护措施大大增加了缓冲区溢出攻击利用的难度,但是它们没有从根本上解决问题,攻击者利用各种手段仍可使攻击成功。从攻击者的角度出发,总结了近年来缓冲区溢出漏洞攻击利用技术发展的情况,主要对溢出后突破防护措施的shellcode技术进行了详细介绍和分析。Buffer overflow vulnerability is one of the most conunon security flaws in software system. Though various protective measures have greatly increased the difficulty of exploitation of buffer overflow, but they don＇ t solve the problem fundamentally. From the perspective of the attackers, the technological developments of exploitation of buffer overflow in recent years were intraduced, detailed description and analysis was presented about how shellcode broken through those protective measures.

关 键 词：缓冲区溢出 净荷 多态外壳码 堆栈保护 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]