Win32平台下内核溢出的原理与攻击方法  

Principle and Attack Method of Kernel Overflow under Win32 Enviroment

作　　者：徐昊[1] 王轶骏[1] 薛质[1] 

机构地区：[1]上海交通大学信息安全工程学院,上海200240

出　　处：《信息安全与通信保密》2008年第6期89-91,共3页Information Security and Communications Privacy

摘　　要：针对系统内核的溢出是当今研究溢出漏洞攻击的发展趋势,而内核溢出主要是由处在系统内核态的驱动程序中的漏洞所产生,文章通过分析Win32平台下的一个内核驱动程序漏洞实例,详细阐述了内核溢出漏洞的产生原理,并引出了相应的攻击方法。Kernel overflow nowadays is a new trend in the research of buffer overflow vulnerabilities, and most kernel overflows occur in the device drivers running in the kernel mode of operating system. In this paper, a vulnerability instance of a kernel driver under Win32 environment is analyzed, the principle behind the vulnerability presented in detail, and then its corresponding exploitation described.

关 键 词：内核漏洞 溢出攻击 驱动程序 WIN32平台 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]