地址空间随机化技术研究  

RESEARCH ON ADDRESS SPACE RANDOMIZATION TECHNIQUES

作　　者：戈戟[1] 徐良华[1] 史洪[1] 

机构地区：[1]江南计算技术研究所,江苏无锡214083

出　　处：《计算机应用与软件》2009年第9期38-41,共4页Computer Applications and Software

基　　金：国家863高技术研究发展计划基金项目(2006AA01Z431)

摘　　要：地址空间随机化ASR(address space randomization)技术的目的是使进程空间不可预测,从而保护系统不受攻击。研究了几乎所有主流的ASR系统和技术的原理;分析了其优缺点;研究了对部分ASR系统进行攻击的方法;最后提出了实现实用的ASR系统需要注意的一些问题。The goal of Address Space Randomization technology is to make the address space of a process unpredictable, and protect the system from attacks. Almost all main Address Space Randomization systems and technologies are studied, their advantages and shortcomings are analyzed as well, the way of attacking against some of these systems are studied, and several issues on the realization of ASR are presented in the end of the paper.

关 键 词：地址空间随机化 缓冲区溢出 安全漏洞 网络安全 

分 类 号：TP317[自动化与计算机技术—计算机软件与理论] TN915.04[自动化与计算机技术—计算机科学与技术]