基于动态污点分析的栈溢出Crash判定技术  

Stack Overflow Crash Judgment Technology Based on Dynamic Taint Analysis

作　　者：张婧 周安民[1] 刘亮[1] 贾鹏[1] 刘露平 贾丽 ZHANG Jing;ZHOU Anmin;LIU Liang;JIA Peng;LIU Luping;JIA Li(College of Electronics and Information Engineering,Sichuan University,Chengdu 610065,China)

机构地区：[1]四川大学电子信息学院,成都610065

出　　处：《计算机工程》2018年第4期168-173,180,共7页Computer Engineering

摘　　要：Fuzzing技术和动态符号执行技术以发现程序异常为测试终止条件,却无法进一步评估程序异常的威胁严重等级。为此,阐述用于Crash可利用性分析的3种主要方法。在二进制插桩平台Pin上,提出一种基于动态污点分析技术的Crash可利用性自动化分析框架。实验结果表明,该框架能够准确有效地判断Crash的可利用性程度。Fuzzing technology and dynamic symbol execution technology are used to discover program exceptions as the test termination condition without further assessing the threat severity of the program exception.This paper describes three main methods for Crash exploitability analysis.Based on the binary instrumentation platform Pin,this paper proposes a Crash exploitability automated analysis framework based on dynamic taint analysis technique.Experimental results show that the framework can accurately and effectively determine the exploitability extent of Crash.

关 键 词：软件异常 Crash分析 可利用性判定 动态二进制插桩 动态污点分析 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]