基于过程间分析的缓冲区溢出易发点检测  

Buffer overflow prone points detection based on inter-process analysis

作　　者：邹雪[1] 王兴起[1] 方景龙[1] 王大全[1] ZOU Xue;WANG Xingqi;FANG Jinglong;WANG Daquan(College of Computer Science and Technology, Hangzhou Dianzi University, Hangzhou 310018, China)

机构地区：[1]杭州电子科技大学计算机学院,杭州310018

出　　处：《计算机工程与应用》2016年第15期110-113,共4页Computer Engineering and Applications

基　　金：国家部委基础科研重点项目;国家部委技术基础科研项目

摘　　要：针对循环拷贝内存引发的缓冲区溢出漏洞,提出了一种上下文相关的过程间分析检测模型,通过对二进制代码进行一系列的静态分析,使用过程间分析提供的数据交互关系,对缓冲区溢出易发点进行挖掘。这种检测模型基于Bin Navi的开放平台,以插件形式实现,能够对溢出易发点进行精确的筛选,有效地减少误报漏报情况。For buffer overflow vulnerability caused by circulating copies of memory, this paper proposes a context-sensitiveinter-process analysis and detection model. Through a series of static analysis of binary code, inter-process analysis usingdata provided by the inter-process analysis, it mines the buffer overflow prone points. This detection model is based onBinNavi open platform, implemented as a plug, is able to screen accurately spill-prone points and effectively reduces falseand negative cases.

关 键 词：缓冲区溢出 循环 易发点 过程间分析 函数摘要 

分 类 号：TP391[自动化与计算机技术—计算机应用技术]