基于内存更新记录的漏洞攻击错误定位方法  

Automatic Fault Localization to Memory Corruption Vulnerabilities Based on Memory Update Log

作　　者：葛毅[1] 茅兵[1] 谢立[1] 

机构地区：[1]南京大学计算机科学与技术系软件新技术国家重点实验室,南京210093

出　　处：《计算机科学》2009年第1期252-255,共4页Computer Science

基　　金：国家863高技术研究计划(No.2007AA01Z448);国家自然科学基金(60773171);江苏省自然科学基金(BK2007136)的资助

摘　　要：软件漏洞攻击威胁日益严重。其中基于内存腐败漏洞的攻击最为普遍,如缓冲区溢出和格式化串漏洞。提出一种针对内存腐败漏洞攻击的自动错误定位方法。基于内存更新操作记录,可以回溯找到程序源代码中腐败关键数据的语句,从而提供有益的信息修复漏洞并生成最终补丁。Attacks exploiting vulnerabilities in software are becoming a great threat to the society. The most common attack method is to exploit memory corruption vulnerabilities such as buffer overflow and format string bugs. This paper presented a fault localization approach to automatically identify both known and unknown memory corruption vulnerabilities. Based on memory update log, we can trace back to the statement in source code that is tricked to corrupt critical data. The proposed techniques can provide useful information in fixing the vulnerabilities and generating the real patch.

关 键 词：内存腐败攻击 软件安全 错误定位 程序源代码 

分 类 号：TP316.7[自动化与计算机技术—计算机软件与理论] TP333.1[自动化与计算机技术—计算机科学与技术]