Vista的抵御缓冲区溢出攻击技术研究  

Research for resisting buffer overflow attack technologies of Vista

作　　者：魏立峰[1] 江荣[1] 赵栋[1] 

机构地区：[1]国防科学技术大学计算机学院,长沙410073

出　　处：《计算机应用研究》2010年第5期1853-1855,1881,共4页Application Research of Computers

基　　金：国家"863"计划资助项目(2007AA01Z461)

摘　　要：缓冲区溢出攻击是一种在互联网时代被广泛利用并危害严重的主要攻击方式。分析了缓冲区溢出攻击的基本原理,总结了缓冲区溢出攻击的关键步骤,并研究分析了Windows Vista的抵御缓冲区溢出攻击的四种关键技术,包括地址空间配置随机化(ASLR)、数据执行保护(DEP)、GS栈保护和安全(structured exception han-dling,SEH)等技术;最后对Windows Vista抵御缓冲区溢出的整体效果进行了分析,指出了Vista仍然不能完全抵御缓冲区溢出攻击。Buffer overflow attack is a main attack method in internet, which has been widely used and could cause great damage. Analyzed the principle of buffer overflow attacks and summed up the key steps of buffer overflow attacks, researched and analyzed the four key technologies for resisting buffer overflow attack of the Windows Vista, including ASLR, DEP, GS stack protection, and safe structured exception handling （SafeSEH）. finally analyzed the total effect of resisting buffer overflow of Windows Vista, and pointed out that Vista couldn’t resist the buffer overflow attack Absolutely.

关 键 词：缓冲区溢出 VISTA 地址空间配置随机化 数据执行保护 GS栈保护 安全SEH 

分 类 号：TP301[自动化与计算机技术—计算机系统结构]