基于对象的C程序边界安全检测改进技术  

Improved Object-based Approaches for Bounds Checking of C Programs

作　　者：马银雪[1] 李文明[1] 陈哲[1] 

机构地区：[1]南京航空航天大学计算机科学与技术学院,江苏南京210016

出　　处：《计算机与现代化》2015年第10期25-30,共6页Computer and Modernization

基　　金：国家自然科学基金资助项目(61100034)

摘　　要：C语言对内存操作不进行边界安全检测,这使C程序具有高执行效率,但也产生各种安全问题,例如数组越界、指针访问越界、C库函数的非法操作等。基于对象的运行时验证技术能实时监测程序的运行行为,自动找出程序中存在的漏洞。在原有基于对象技术的基础上,改进多维数组和结构体变量的地址范围记录方式,用2次地址查询操作检测指针访问,用平衡二叉树优化存储结构。实验结果表明,改进的方法优于传统的基于对象技术。C programs are efficient because it did not check memory bounds safety. However,it also brought a lot of security issues,such as out of bounds of arrays and pointers,illegal operations of C library functions. Object-based runtime verification approaches can monitor program running and find bugs automatically. We improved the traditional approaches by changing address range records of multidimensional arrays and structure variables,querying address two times to detect pointer access,and using AVL tree for storage structure of records. The experiment shows that our approach is better than traditional ones.

关 键 词：运行时验证 基于对象技术 边界检测 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]