摘要
地址空间随机化ASR(address space randomization)技术的目的是使进程空间不可预测,从而保护系统不受攻击。研究了几乎所有主流的ASR系统和技术的原理;分析了其优缺点;研究了对部分ASR系统进行攻击的方法;最后提出了实现实用的ASR系统需要注意的一些问题。
The goal of Address Space Randomization technology is to make the address space of a process unpredictable, and protect the system from attacks. Almost all main Address Space Randomization systems and technologies are studied, their advantages and shortcomings are analyzed as well, the way of attacking against some of these systems are studied, and several issues on the realization of ASR are presented in the end of the paper.
出处
《计算机应用与软件》
CSCD
2009年第9期38-41,共4页
Computer Applications and Software
基金
国家863高技术研究发展计划基金项目(2006AA01Z431)
关键词
地址空间随机化
缓冲区溢出
安全漏洞
网络安全
Address space randomization（ASR） Buffer overflow Vulnerability Network security
