软件安全漏洞挖掘技术的研究

The Research on Software Security Vulnerabilities Mining

本文首先通过对软件安全漏洞发掘相关技术的研究和分析,针对静态分析和动态分析的优缺点,提出一套比较实用的软件安全漏洞挖掘技术,然后使用该技术对自编的overflow-strepy.exe和no-loop-overflow-strepy.exe两个实际应用程序进行检测,准确的检测出了程序中的漏洞。

At first, according to the research and analysis to the technology about the software security vulnerabilities, and dealing with the strengths and weaknesses of the static and dynamic analysis, this paper proposed a more practical mining of software security vulnerabilities, and then use the selfedited technology to detect two practical applications, which are the overflow-strepy.exe and no-loopoverflow-strepy.exe, and it detected the loopholes accurately.