C语言源程序的缓冲区溢出漏洞分析及解决方案  

Loopholes Analysis and Solved Scheme of Buffer Overflow Attacks on C Language Function

作　　者：刘俊[1] 张枫[1] 

机构地区：[1]沈阳化工学院计算机科学与技术学院,辽宁沈阳110142

出　　处：《沈阳化工学院学报》2008年第3期265-268,共4页Journal of Shenyang Institute of Chemical Technolgy

摘　　要：着重分析一些存在缓冲区溢出攻击漏洞的C语言函数,介绍具有哪些特点的C函数容易受到缓冲区溢出攻击,并借此更加深入地了解缓冲区溢出攻击机制.探讨了缓冲区溢出攻击程序的结构.最后提出避免缓冲区溢出攻击的方法.该方法从C函数和攻击程序两方面入手,通过避免或正确使用有缓冲区溢出攻击漏洞的C语言函数;了解恶意程序代码的结构识别恶意程序代码,达到避免缓冲区溢出攻击的目的.The buffer overflow attack loopholes are emphatically analyzed in some C language functions. It introduces the characteristics that the C functions are easily attacked, enables the buffer overflow mechanism and makes more clearly by analyzing the structure of the evil attack program, and finally some methods that can avoid the buffer overflow attack are proposed. The methods start with two aspects： The C function can avoid the attack program through avoiding attack or correctly using the C language function that has buffer overflow loopholes;The structure of the evil intention program is understood and recognized. The method finally achieves the goal to avoid the buffer overflow attack.

关 键 词：缓冲区 溢出 安全攻击 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]