期刊文献+

Win32平台下内核溢出的原理与攻击方法 被引量:1

Principle and Attack Method of Kernel Overflow under Win32 Enviroment
原文传递
导出
摘要 针对系统内核的溢出是当今研究溢出漏洞攻击的发展趋势,而内核溢出主要是由处在系统内核态的驱动程序中的漏洞所产生,文章通过分析Win32平台下的一个内核驱动程序漏洞实例,详细阐述了内核溢出漏洞的产生原理,并引出了相应的攻击方法。 Kernel overflow nowadays is a new trend in the research of buffer overflow vulnerabilities, and most kernel overflows occur in the device drivers running in the kernel mode of operating system. In this paper, a vulnerability instance of a kernel driver under Win32 environment is analyzed, the principle behind the vulnerability presented in detail, and then its corresponding exploitation described.
出处 《信息安全与通信保密》 2008年第6期89-91,共3页 Information Security and Communications Privacy
关键词 内核漏洞 溢出攻击 驱动程序 WIN32平台 kernel vulnerability overflow attack device drivers Win32 environment
  • 相关文献

参考文献4

  • 1[1]Barnaby J.Remote Windows Kernel Exploitation-Step into the Ring 0[EB/OL].http://research.eeye.com/html/papers/download/StepIntoTheRing.pdf.2006.
  • 2[2]Robert L.Device drivers filled with flaws,threaten security[EB/OL],http://www.securityfocus.com/news/11189.2005-05-26.
  • 3[3]Piotr B.Exploiting Windows Device Drivers[EB/OL].http://www.piotrbania.com/all/articles/ewdd.pdf.2007.
  • 4[4]Symantec.SYM07-018 Symantec SYMTDI.SYS Device Driver Local Elevation of Privilege[EB/OL].http://securityresponse.symantec.com/avcenter/security/Content/2007.07.11d.html.2007-07-11.

同被引文献6

  • 1SYMANTEC COPORATION. Internet security threat report 2014 [EB/OL]. http://www, symantec.com /security response/pub lications/t hreat report.jsp.
  • 2CWE. CWE-367 :time-of-cheek time-of-use (TOCTOU) race condition[EB/OL], http://cwe, mitre, org/data/definitions/367, html.
  • 3ENRICO PERLA, MASSIMILIANO OLDANI. A guide to kernel exploitation attacking the core [M]. Burlington, USA. SYN- GRESS,2010.
  • 4INTEL CORPORATION.英特尔64和IA-32架构软件开发人员手册[EB/OL].http://www.intel.com/content/www/cn/zh/processors/architectures-software-developer-manuals.html.
  • 5MS13-016[EB/OL]. https://technet, microsoft, corn/library/security/ms13-016.
  • 6王子强,李媛州,向东.面向C/C++代码的漏洞检测系统原理与实现[J].计算机应用与软件,2011,28(5):292-295. 被引量:3

引证文献1

二级引证文献5

相关作者

内容加载中请稍等...

相关机构

内容加载中请稍等...

相关主题

内容加载中请稍等...

浏览历史

内容加载中请稍等...
;
使用帮助 返回顶部