Cisco IOS堆管理和保护机制及其脆弱性研究

Research on Cisco IOS Heap Management and Protection Mechanism and It's Frangibility

缓冲区堆溢出攻击是目前Cisco路由器的主要安全威胁。该文分析了Cisco IOS堆管理和保护机制的工作原理,研究其面临堆溢出攻击时的安全脆弱性。在此基础上,探讨完善IOS堆管理和保护机制,增强IOS抵御堆溢出攻击的有效途径。

Heap overflow attack is the reain security thread of Cisco lOS at present. This paper analyzes the principle of Cisco lOS heap management and protection mechanism, and study on the frangibility of the mechanism when resisting heap overflow attack. After that, some effective approaches are discussed to improve the mechanism of lOS heap management and protection, and to enhance the faculty of lOS to resist heap overflow attack.