基于LINUX的安全网关防御缓冲区溢出攻击的方法研究

Solution for Defence against Buffer-Dverflow Attack in Security Gateway Based on Linux

本文分析了缓冲区溢出攻击的原理,概括linux系统针对溢出攻击的常用防御手段。进一步,分析了目前各种基于裁减linux系统的安全网关的特点,提出了其抗缓冲区溢出攻击以增强系统安全性的方法。最后说明了防溢出攻击技术的近期发展。

The theory of buffer-overflow attack is analysed, and some common attack and defence methods are discussed. Then, the paper proposes several suggestions to guard against buffer-overflow attack in security gateway based on linux system. Finally, the recent progress in this field is expounded.