| 基于补丁引发新漏洞的防攻击方法研究 |
| |
| 引用本文： | 徐有福,文伟平,尹亮.基于补丁引发新漏洞的防攻击方法研究[J].信息网络安全,2011(7):45-48. |
| |
| 作者姓名： | 徐有福 文伟平 尹亮 |
| |
| 作者单位： | 北京大学软件与微电子学院信息安全系,北京,102600 |
| |
| 摘 要： | 文章针对漏洞补丁的修补方法进行了深入研究,分析了漏洞补丁后可能引入新的安全隐患,提出了基于漏洞补丁引发新漏洞的漏洞挖掘方法,并进行了方法论证.最后以使用此方法发现的Windows操作系统未知漏洞案例验证了该方法的有效性.
|
| 关 键 词： | 安全漏洞 漏洞挖掘 漏洞补丁 |
Based on the Cause of the New Vulnerabilities Patch Attack Method Research |
| |
| XU You-fu
,
WEN Wei-ping
,
YIN Liang.Based on the Cause of the New Vulnerabilities Patch Attack Method Research[J].Netinfo Security,2011(7):45-48. |
| |
| Authors: | XU You-fu WEN Wei-ping YIN Liang |
| |
| Affiliation: | XU You-fu,WEN Wei-ping,YIN Liang(1.Department of Information Security,SSM,Peking University,Beijing 102600,China) |
| |
| Abstract: | Aiming at the vulnerabilities of the patch repair method is studied,the analysis after the patch may loopholes to introduce new security hidden danger,was put forward based on the cause of the new vulnerabilities loopholes patch holes mining method,the method and argument.Finally to use this method of the Windows operating system found that unknown vulnerabilities cases verify the validity of this method. |
| |
| Keywords: | Security Vulnerabilities digging vulnerabilities vulnerability patches |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
|
