缓冲区溢出漏洞研究与进展  

Research and Development of Buffer Overflow Vulnerability

作　　者：李毅超[1] 刘丹[1] 韩宏[1] 卢显良[1] 

机构地区：[1]电子科技大学计算机科学与工程学院,成都610054

出　　处：《计算机科学》2008年第1期87-89,125,共4页Computer Science

基　　金：科技部国家科技基础条件平台专项(2003DIA7J051)

摘　　要：软件中的缓冲区溢出漏洞是个严重的安全隐患,利用它的攻击给社会造成了巨大的危害和经济损失,缓冲区溢出漏洞检测防护技术已成为一个研究热点。首先分类剖析了缓冲区溢出攻击原理,进而对缓冲区溢出漏洞检测防护技术十几年来的研究进展进行了讨论,最后给出该领域的研究热点问题与展望。The buffer overflow vulnerability in software results in serious security problem, and attacks based on buffer overflow have brought huge society chaos and economic loss. Many researchers focus on the detection and defense of buffer overflow. In this paper, the execution mechanism of the buffer overflow attacks is first presented, then the progress in detection and defense of buffer overflow is addressed, and finally some major problems and research trends in the area are discussed.

关 键 词：缓冲区溢出 静态分析 动态分析 边界检查 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]