基于静态检测的缓冲区溢出漏洞研究  

A Study Based on Static Detection for Buffer Overflow Flaw

作　　者：包常喜[1] 白喜文[1] 赵希武[1] 

机构地区：[1]内蒙古师范大学计算机与信息工程学院,呼和浩特010022

出　　处：《电脑编程技巧与维护》2013年第10期110-112,共3页Computer Programming Skills & Maintenance

摘　　要：缓冲区溢出漏洞是一种危害严重且常见的软件安全漏洞。静态分析方法不需要执行源代码,便可以提取软件的静态信息,从而检测出软件中安全漏洞。针对静态检测工具Splint在检测缓冲区溢出攻击漏洞方面存在的不足,从检测的功能和可检测的"危险函数"类型两个方面进行了改进。最后使用改进后的Splint工具对几个常用的与网络应用相关的软件包进行检测,检测结果表明改进后的Splint检测工具能够大大地提高检测缓冲区溢出漏洞的效率。Buffer overflow flaw is a kind of harm and common software security flaws. Static analysis method which doesn＇ t need to run the source code can extract software static information and detect potential security flaws in software. Because the static detector Splint has limitations in detecting buffer overflow attacking flaws, this paper improves the tool in functionalities of detection and ＂dangerous functions＂ detected. At last, the improved Splint was used to detect several common software packages which are correlative to web application. The results showed the improved Splint could enhance the efficiency of detection to buffer overflow flaws.

关 键 词：静态检测 缓冲区溢出 危险函数 Splint工具 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]