计算机系统的安全隐患—缓冲区溢出攻击

在当前网络与分布式系统安全中,被广泛利用的50%以上都是缓冲区溢出。缓冲区溢出是通过向一个有限的空间缓冲区复制过长的字符串,从而破坏程序的堆栈,使程序转而执行其它的指令,以达到攻击的目的。该文通过分析缓冲区溢出攻击的原理,提出数组边界检查等方法来对缓冲区溢出攻击进行防御。

Computer System Security-Buffer Overflow Attack

In the current network and distributed system security,buffer overflow is widely used by more than 50%.Buffer overflow is limited space to a buffer copy of the string is too long,thus undermining the process stack,so that the implementation of other procedures turn instructions,so as to achieve the purpose of the attack.In this paper,by analyzing the principles of buffer overflow attacks,the array of border checkpoints and other methods to defend buffer overflow attacks.