Windows下缓冲区溢出保护机制及绕过技术  

Buffer Overflow Protection Mechanism and Bypass Technology Under Windows

作　　者：马一楠[1] 张立和[2] 

机构地区：[1]河南大学计算机与信息工程学院,开封475004 [2]大连理工大学信息与通信工程学院,大连116024

出　　处：《计算机工程》2010年第17期147-151,共5页Computer Engineering

摘　　要：综述当前Windows平台下主要的缓冲区溢出保护机制,该保护机制的绕过技术可以提高漏洞分析与利用的成功率及操作系统的安全性。介绍当前主要的缓冲区溢出保护机制的绕过技术的发展现状。针对堆栈溢出及数据执行保护(DEP)机制的突破技术,分别给出突破原理和方法。通过实验验证了DEP突破技术的有效性。In this paper, the main buffer overflow protection mechanism is summarized under the current Windows platform, and the method and technologies about bypassing these protection mechanisms are studied, which can increase the success rate of vulnerabilities analysis and use, and guide to improve the security of the operating system. The paper describes the development of the current main technologies on bypassing the buffer overflow protection mechanisms. The principles and methods about bypassing stack overflow protection, heap overflow protection Data Execution Prevention（DEP） are all given. Effectiveness of the methods of bypassing DEP is verified through an experiment.

关 键 词：缓冲区溢出 栈溢出 堆溢出 数据执行保护 绕过技术 

分 类 号：TP316[自动化与计算机技术—计算机软件与理论]