嵌入式系统安全中缓冲区溢出防止技术的研究与实现

The research and implement of defending against buffer overflow in the security of embedded systems

提出将嵌入式系统下缓冲区溢出分为堆栈溢出攻击和指针攻击两类,并基于该分类提出软硬件结合的防范缓冲区溢出方法,针对两类缓冲区溢出分别采用基于硬件的堆栈保护技术和指针保护技术来防范。与[2]中的软硬件防范技术(HSDefender)相比,本文的方法进一步实现了数据指针的保护。

In the embedded systems, buffer overflow is classified into two categories--stack smashing attacks and pointer attacks. Based on the categories , Hardware-based Stack Protection technology is used to defend against stack smashing attacks , and pointer protection technology against pointer attacks. In comparision with Hardwre/Software Defender , the technology in this paper added the protection for data pointer in the program.