信息安全研究 ›› 2019, Vol. 5 ›› Issue (9): 812-819.

• 学术论文 • 上一篇    下一篇

缓冲区溢出漏洞分析及防范策略

华驰1,鲁志萍2,王可2   

  1. 1. 江苏信息职业技术学院物联网工程学院
    2. 江苏信息职业技术学院
  • 收稿日期:2019-09-06 出版日期:2019-09-15 发布日期:2019-09-06
  • 通讯作者: 华驰
  • 作者简介:华驰,博士研究生,副教授、高级工程师,CCF 会员,主要研究方向为计算机网络、网络信息安全、计算机高等职业技术教育, huac@jsit.edu.cn 鲁志萍:副教授,主要研究方向为计算机计算机网络、网络信息安全, luzp@jsit.edu.cn 王可:大专,主要研究方向为网络信息安全,wangk@jsit.edu.cn

Buffer Overflow Vulnerability Analysis and Guard Strategy

  • Received:2019-09-06 Online:2019-09-15 Published:2019-09-06

摘要: 针对缓冲区溢出漏洞危害的广泛性和严重性,在研究缓冲区溢出漏洞原理的基础上,按照本地缓冲区溢出攻击和远程缓冲区溢出攻击2种方式分析了缓冲区溢出漏洞攻击方法,基于分析结果对2种溢出分别提出了缓冲区溢出漏洞的防范策略.实验证明:对于本地和远程缓冲区的防范策略可以有效解决缓冲区溢出漏洞带来的危害.

关键词: 缓冲区溢出漏洞, 本地缓冲区, 远程缓冲区, 防范策略, Shellcode

Abstract: In view of the extensiveness and seriousness of the buffer overflow vulnerability, on the basis of studying the principle of buffer overflow vulnerability, attacking methods of buffer overflow vulnerability were analyzed according to local buffer overflow attack and remote buffer overflow attack, and guard strategies for two kinds of buffer overflow vulnerabilities are proposed. Experiments show that the local and remote buffer guard strategies can effectively solve the harm caused by buffer overflow vulnerabilities.

Key words: buffer overflow vulnerability, local buffer overflow, remote buffer overflow, guard strategy, Shellcode