基于验证欺骗的AVM2虚拟机逃逸技术  

Escape technique of AVM2 virtual machine based on verification deception

作　　者：刘小珍[1,2] 李焕洲[2] 

机构地区：[1]四川师范大学计算机科学学院,成都610101 [2]四川师范大学网络与通信技术研究所,成都610101

出　　处：《计算机应用》2010年第8期2130-2133,共4页journal of Computer Applications

基　　金：四川省应用基础研究项目(07JY029-011);四川省教育厅重点项目(08ZA043)

摘　　要：介绍了AVM2虚拟机的应用背景、安全研究价值和逃逸技术现状。从AVM2安全模型中的ABC验证缺陷入手,结合宿主环境漏洞和字节码仿真引擎漏洞,研究了基于验证欺骗的逃逸技术细节。最后根据当前研究成果,提出相应的防范策略,以及下阶段的改进目标。The usage value of security study and present situation of escape techniques of AVM2 ActionScript Virtual Machine 2 were introduced.Starting from the flaws of ABC verification in AVM2 security model with host environment vulnerabilities and byte code simulation engine vulnerabilities the technique details of the escape based on verification deception were then analyzed.Finally according to the current research proper strategies of defense and the target to improve in the next phase were given.

关 键 词：AVM2虚拟机 逃逸 安全模型 验证欺骗 宿主环境 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]