摘要
分析缓冲区溢出原因和现有检测技术,提出一种基于危险函数的缓冲区溢出检测流程。该流程首先对反汇编代码中的危险函数的普通形式和展开形式进行定位,然后对危险函数进行参数分析和动态检测,验证危险函数能否发生溢出,最后通过人工分析技术,进一步对参数分析和动态检测的结果进行验证。给出缓冲区溢出检测流程的具体实现。实验结果表明该检测流程是有效的。
Buffer overflow is analyzed for its reasons along with present buffer overflow detection technologies.A risk function based buffer overflow detection procedure is put forward.The procedure at first locate the general form and unfolded form of risk functions from the disassembly code,then carries out parameter analysis and dynamic detection on them to judge whether those risk functions may cause overflow,and finally by artificial analysis technology performs further verifications on the results of parameter analysis and dynamic detection.The detailed implementation of the buffer overflow detection procedure is given.Experiment result validates the detection procedure.
出处
《计算机应用与软件》
CSCD
2011年第9期185-187,共3页
Computer Applications and Software
关键词
缓冲区溢出
危险函数
参数分析
动态检测
人工分析
Buffer overflow Risk function Parameter analysis Dynamic detection Artificial analysis
