参考安全补丁比对的软件安全漏洞挖掘方法  

Software security vulnerability exploitation method based on a security patch

作　　者：文伟平[1] 张普含[2] 徐有福[1] 尹亮[1] 

机构地区：[1]北京大学软件与微电子学院,信息安全系,北京102600 [2]中国信息安全测评中心,北京100085

出　　处：《清华大学学报（自然科学版）》2011年第10期1264-1268,共5页Journal of Tsinghua University(Science and Technology)

基　　金：国家自然科学基金资助项目(61170282)

摘　　要：Windows操作系统作为目前全球使用最广泛的桌面操作系统,一旦其漏洞被利用将造成严重后果,所以对Windows操作系统的漏洞发掘意义重大。当前对软件安全漏洞的发现更多的是依靠安全研究人员的经验和运气,缺乏系统且有效的方法指导。为了找到一种能够快速发现Windows一类漏洞的方法,本文从安全补丁的修补方法入手,分析了漏洞补丁后可能引入新的安全隐患的4种模式,提出了一种参考安全补丁比对的软件安全漏洞挖掘方法,并对方法进行了形式化描述。利用此方法较好的解决了半自动化挖掘Windows系统漏洞问题。最后以Windows操作系统未知漏洞案例验证了该方法的有效性。Windows is the world＇s most widely used desktop operating system,so security vulnerabilities in windows have an enormous impact on system security and exploiting vulnerabilities in the Windows operating system has great significance.At present,the discovery of software security vulnerabilities depends mainly on the experience and luck of security researchers since they lack systematic and effective methods to find vulnerabilities.To more quickly find a class of vulnerabilities,this paper focuses on patch vulnerability with four types of security threat modes introduced patches.Then this paper describes a software security vulnerability exploitation method based on patch comparison.This method can be used to solve the semi-automatically find Windows vulnerabilities with patches.This method found unknown Windows operating system vulnerabilities to verify its effectiveness.

关 键 词：漏洞发现 补丁比对 形式化描述 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]