溢出型网页恶意代码运行机理分析与防范  

Mechanism Analysis and Prevention of Overflow-type Web Page Malicious Code

作　　者：李志勇[1] 陶然[1] 王越[1] 张昊[1] 

机构地区：[1]北京理工大学信息与电子学院,北京100081

出　　处：《兵工学报》2010年第6期832-836,共5页Acta Armamentarii

基　　金：信息安全计划资助项目(2005A10);信息安全计划资助项目(2007F40)

摘　　要：溢出型的网页恶意代码是利用程序中的溢出漏洞将恶意代码在网络用户主机激活,从而给用户带来极大的危害。为了研究其作用机制,对典型的溢出脚本进行分析,跟踪其在内存中的操作变化,找出了溢出型网页恶意代码激活所需条件和具体细节;分析了网页恶意代码通用溢出设计原理,得出其在操作系统软件环境下触发漏洞的一般设计方法。最后,提出了防范溢出型的网页恶意代码防范措施。The overflow-type web page malicious codes can activate malicious codes by using the overflow vulnerability of the programmes in the users＇ host computers, which will harm the Internet users greatly. In order to study their mechanisms, this paper analyzes the typical overflow script and track their operation changes in RAM, finds out the specific details and conditions required for activating overflow-type web page malicious codes, analyzes their general design principle, and obtains their general design method of triggering a vulnerability in the operating system software. Finally, some suggestions to prevent the overflow-type web page malicious codes are presented.

关 键 词：计算机科学技术基础学科 网页恶意代码 溢出漏洞 溢出型网页恶意代码 

分 类 号：TN915.08[电子电信—通信与信息系统]