| 一种抗地址淹没的缓冲区栈溢出算法 |
| |
| 引用本文： | 唐成华,彭灿,刘猛,钱俊彦. 一种抗地址淹没的缓冲区栈溢出算法[J]. 计算机应用研究, 2017, 34(12) |
| |
| 作者姓名： | 唐成华 彭灿 刘猛 钱俊彦 |
| |
| 作者单位： | 桂林电子科技大学 广西可信软件重点实验室,桂林电子科技大学 广西可信软件重点实验室,桂林电子科技大学 广西可信软件重点实验室,桂林电子科技大学 广西可信软件重点实验室 |
| |
| 基金项目： | 国家自然科学(61462020,61562015)；广西自然科学(2014GXNSFAA118375)；广西可信软件重点实验室项目(kx201506)；广西密码学与信息安全重点实验室课题(GCIS201619)；广西高等学校高水平创新团队及卓越学者计划资助 |
| |
| 摘 要： | 缓冲区溢出是常见的网络漏洞攻击,其中最重要的是栈溢出攻击。通过分析缓冲区溢出攻击的方法和特点,提出一种基于StackShield改进的RetProtect算法,首先利用IDA Pro对源程序反汇编分析,然后建立新的库函数,并通过修改gcc源代码来实现程序执行时对函数返回地址的备份的方法来检测缓冲区溢出攻击的发生。与其它栈溢出攻击检测方法相比,RetProtect算法可有效地阻止对返回地址进行淹没的栈溢出攻击,对用户透明,系统兼容性好。
|
| 关 键 词： | 缓冲区溢出 栈溢出 地址淹没 返回地址备份 |
| 收稿时间： | 2016-11-09 |
| 修稿时间： | 2017-10-19 |
An anti-address flooding algorithm for buffer stack overflow |
| |
| Tang Chenghu,Peng Can,Liu Meng and Qian Junyan. An anti-address flooding algorithm for buffer stack overflow[J]. Application Research of Computers, 2017, 34(12) |
| |
| Authors: | Tang Chenghu Peng Can Liu Meng Qian Junyan |
| |
| Affiliation: | Guangxi Key Laboratory of Trusted Software,Guilin University of Electronic Technology,,, |
| |
| Abstract: | Buffer overflow is common network vulnerability, and the most important one is the stack overflow attack. Based on the analysis of the methods and features of buffer overflow attacks, an improved RetProtect algorithm based on StackShield is proposed. Firstly, the IDA Pro is used on the source program for disassembly analysis, and then a new library function is established. Finally, by modifying the gcc source code, the method to backup the function return address is realized, so as to detect the occurrence of buffer overflow attacks. Compared with other stack overflow attack detection methods, The RetProtect algorithm can effectively prevent the stack overflow attacks on the return address overlay, which is transparent to the user and good compatibility. |
| |
| Keywords: | buffer overflow stack overflow address flooding return address backup |
|
| 点击此处可从《计算机应用研究》浏览原始摘要信息 |
|
点击此处可从《计算机应用研究》下载全文 |
|
