基于Windows的Web应用程序安全测试平台——缓冲区溢出测试

Buffer Overflow Attacking of Security Testing Platform in Web Application Based on Windows

本文主要探讨一下在Windows平台下的Web应用程序的安全性测试,就缓冲区溢出的测试做重点论述。本文解释了缓冲区溢出的概念,对缓冲区溢出的原理进行了详细的阐述;通过一个会导致缓冲区溢出的程序代码进行实例分析,总结出了缓冲区溢出攻击的类型;最后,结合缓冲区溢出攻击的类型,提出了缓冲区溢出攻击的防范策略。

Buffer overflow attacking is a seriously problemin network security and causes serious security problems in recently years.Some program languages have pestilent bugs that will cause buffer overflow.This paper detailedly analyzes the principle and the possibility of buffer overflow attacking,and points out potential risks of buffer overflow.According to the kinds of buffer overflow attacking,the author puts forward opinions of precautionary measures on buffer overflow attacking.