摘要
为了提高对缓冲区溢出漏洞的挖掘效率,提出了使用数据关联性分析辅助漏洞挖掘的方法。该方法首先对目标文件进行反编译,在反编译的基础上构建函数的抽象语法树(AST),设计算法提取关键变量的反向关联信息,之后将提取的信息应用到漏洞挖掘中。该方法在无源码漏洞挖掘方面有明显优势,能有效发掘软件中存在的缓冲区溢出漏洞可疑点,提高漏洞挖掘的效率和自动化程度。
Abstract： In order to improve the efficiency of such vulnerabilities discovery, this paper presented a method which used data correlation analysis auxiliary vulnerabilities discovery. Firstly, the method deeompiled target files and constructed the abstract syntax tree （AST）, designed algorithm to extract the inversely correlation information of key variables. Then, it applied the extracted information to detect of buffer overflow. This method has obvious advantages in non-source code vulnerability disco- very, can discover buffer overflow in the software effectively, and improve the efficiency and automation of vulnerability dis- covery.
出处
《计算机应用研究》
CSCD
北大核心
2014年第2期583-585,589,共4页
Application Research of Computers
关键词
反编译
漏洞挖掘
缓冲区溢出
数据关联性
抽象语法树
decompile
vulnerability discovery
buffer overflow
data correlation
abstract syntax tree （AST）
