缓冲区溢出攻击原理与防范的研究*

缓冲区溢出攻击是网络攻击事件中最常用的一种攻击方式，成为系统和网络安全中亟待解决的重要问题。在分析缓冲区溢出攻击原理的基础上，说明了攻击的成因，然后描述了目前常见的攻击类型，最后给出了现有的防范措施，进而提出了一种新的通过对编译器及相关系统级函数进行修改来解决该问题的方案。

Research on Principle and Defense of Buffer Overflow Attacks

The buffer overflow attacks have been the most common form in the network attacks and become a predominant problem in the system and network security area. After the principle of the buffer overflow attack is explained, this paper analyzes the causes leading to the attacks. Then the usual attack types the attackers often exploit are presented. Last, the common measures to defend these attacks and my own idea about the solution of this problem by modifying the compiler and the relevant functions of the system are given.