摘要
漏洞是软件安全的一个严重威胁,如何检测软件中存在的漏洞对提高其安全性具有重要的意义。经过分析缓冲区溢出漏洞产生的原因,得出了其形成的3个必要条件,并根据产生原因的不同,针对函数调用出错和循环拷贝出错而导致的两类缓冲区溢出漏洞,分别提出了相应的基于有限状态自动机的漏洞检测模型。
Vulnerability is a serious menace to software security, so vulnerability detection has important meanings for improving software security. The reasons and conditions of buffer overflow vulnerability are analyzed, then an detection model based on finite automata is presented to detect buffer overflow vulnerabilities which cause by improper function calls and circulatory buffer copy.
出处
《计算机工程与设计》
CSCD
北大核心
2007年第8期1804-1806,共3页
Computer Engineering and Design
