摘要
针对基于Intel 80X86结构的C/C++栈缓冲区溢出攻击的典型防御方法的不足,提出了一种基于双栈结构的缓冲区溢出漏洞的防御方法,设计并实现了一个ELF格式目标文件重构工具.实验结果表明,所提出的方法和开发的工具能在较低的性能开销下实现栈缓冲区溢出攻击的防御.
An analysis is made of the classical buffer overflow prevention methods for Intel 80X86 architecture and C/C＋＋.A new stack buffer overflow prevention method based on dual-stack is proposed due to the shortcomings of classical methods.Besides,an object file reconstructing tool for ELF format files is implemented with the dual-stack structure.Experiment results show that the proposed method and the tool are efficient for buffer overflow attack prevention with low overhead.
出处
《同济大学学报（自然科学版）》
EI
CAS
CSCD
北大核心
2012年第3期452-458,共7页
Journal of Tongji University:Natural Science
基金
国家"八六三"高技术研究发展计划(2007AA01Z142)
关键词
软件漏洞
栈缓冲区溢出攻击
栈缓冲区溢出攻击防御
双栈
software vulnerabilities
stack buffer overflow
stack buffer overflow prevention
dual-stack
