|
|||||
|
|
| shellcode攻击与防范技术 | |
| 引用本文： | 王颖,李祥和,关龙,崔宝江.shellcode攻击与防范技术[J].计算机工程,2010,36(18):163-165. |
| 作者姓名： | 王颖 李祥和 关龙 崔宝江 |
| 作者单位： | 1. 北京邮电大学计算机学院,北京,100876;解放军信息工程大学信息工程学院,郑州,450002 2. 解放军信息工程大学信息工程学院,郑州,450002 3. 大连理工大学电子与信息工程学院,辽宁,大连,116024 4. 北京邮电大学计算机学院,北京,100876 |
| 基金项目： | 国家"863"计划基金资助项目，国家部委预研基金资助项目 |
| 摘 要： | 针对Windows系统环境下，攻击者通过shellcode代码威胁系统安全的问题，研究shellcode攻击与防范方法。分析shellcode代码的工作原理、攻击过程及多种变化，介绍新型Windows系统采用的GS和ASLR保护对shellcode攻击的防范机制，并通过实验验证其防范效果。结果证明，实施shellcode攻击需要一定的条件，而GS和ALSR可破坏这些攻击条件的形成，有效阻止攻击。 |
| 关 键 词： | shellcode代码 编码 定位 |
Attack and Defending Technology of shellcode |
|
| WANG Ying,LI Xiang-he,GUAN Long,CUI Bao-jiang.Attack and Defending Technology of shellcode[J].Computer Engineering,2010,36(18):163-165. | |
| Authors: | WANG Ying LI Xiang-he GUAN Long CUI Bao-jiang |
| Affiliation: | (1. School of Computer, Beijing University of Posts and Telecommunications, Beijing 100876, China; 2. Institute of Information Engineering, PLA Information Engineering University, Zhengzhou 450002, China;3. School of Electronic and Information Engineering, Dalian University of Technology, Dalian 116024, China) |
| Abstract: | Aiming at the problem that shellcode threats the security of the operating system, this paper researches on the shellcode attack and the method against the attack. Principle, consisting and process of the shellcode attack are analysed. The GS and ALSR work against the shellcode attack, and the effect of the GS and ALSR protection mechanism is tested. Experimental results show that it needs some conditions when the attacker carries out the shellcode attack, and the new protection mechanism can limit this condition against the attack. |
| Keywords: | shellcode coding location |
| 本文献已被 维普 万方数据 等数据库收录！ | |
| 点击此处可从《计算机工程》浏览原始摘要信息 | |
| 点击此处可从《计算机工程》下载全文 | |