软件动态防御技术研究综述  

Review of Software Dynamic Defense Technology

作　　者：田楠[1] 蒲江[1] 

机构地区：[1]中国人民解放军海军计算技术研究所,北京100841

出　　处：《网络空间安全》2017年第8期38-42,共5页Cyberspace Security

摘　　要：软件动态防御技术是指通过动态更改软件自身及其执行环境,改变软件同质化现象,减少攻击者利用软件漏洞造成大规模攻击的一种技术手段。论文综述了目前常见的软件动态防御技术,包括地址空间随机化技术、指令集随机化技术和多变体执行技术等,介绍了各技术手段的研究现状和技术原理,分析了针对各类攻击的效能和存在的不足,最后对各种技术手段进行总结,并对软件动态防御技术的发展提出展望。Software dynamic defense technology is to change the software and the execution environment,solve the software homogeneity phenomenon, and reduce the use of software vulnerabilities to cause largescale attacks. This paper summarizes the current common software dynamic defense technology, including address space randomization technology, instruction set randomization technique and multi variant implementation technology, introduces the principle of the present research situation and the technological means, the analysis for all kinds of attack effectiveness and problems, at the end of a variety of techniques are summarized, and the development of software dynamic defense technology is put forward.

关 键 词：软件漏洞 软件动态防御 技术原理 

分 类 号：TP311.5[自动化与计算机技术—计算机软件与理论]