缓冲区溢出攻击检测技术综述  

A Survey on Buffer Overflow Attack Detection Technology

作　　者：贾凡[1] 张玉琢[1] 吴承文[1] 

机构地区：[1]北京交通大学电子信息工程学院,北京100044

出　　处：《计算机安全》2011年第5期93-96,共4页Network & Computer Security

摘　　要：利用缓冲区溢出漏洞进行攻击自诞生以来始终是网络攻击常用的手段,对信息安全危害极大。如何检测缓冲区溢出成为研究的一个热点,并涌现出了各种各样的方案。首先将现有的缓冲区溢出攻击检测技术按照检测对象分为三大类,然后具体分析了每一类的原理,工具,实现手法及优缺点,最终分析总结了缓冲区溢出检测技术的发展现状。It has always been a common way to attack the Internet using the buffer overflow vulnerability,and it does great harm to the information security.How to detect buffer overflow has become a focus of study,and there has emerged a wide variety of solutions.Firstly,this paper divides the existing technologies of buffer overflow attack detection into three categories according to the test subjects,and then analyses the principles,tools,means,advantages and disadvantages of each category＇s.Finally,the paper summarizes and analyzes the development of buffer overflow attack detection technology nowadays.

关 键 词：缓冲区溢出检测 源代码 目标代码 攻击代码特征 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]