缓冲区溢出函数定位模型的设计与实现

Design and implementation of model for positioning vulnerable function in buffer overflow

利用缓冲区溢出漏洞的攻击是当前安全领域面临的主要威胁之一。缓冲区溢出漏洞的分析通常需要从引发该溢出的函数调用入手,溢出函数的定位往往需要耗费大量的时间和精力,因此实现该函数的自动定位可以极大地缩短安全响应时间。针对这种情况,基于Windows调试框架提出并实现了一个缓冲区溢出函数自动定位的模型LVF。简要地介绍了LVF的工作模式,着重讨论了LVF的定位方法,并给出了LVF的框架设计。实验结果表明,LVF能够有效地实现溢出函数的自动定位。

Attacks by vulnerability exploiting of buffer overflow is one of the major threats in current security field.Buffer overflow vulnerability analysis generally starts from the vulnerable function which triggers the overflow,while a lot of time and effort is often required to spend on the positioning of the vulnerable function,achieving the automatic positioning of this function could shorten the response time significantly.In view of this situation,LVF,which is a model of positioning the vulnerable function in a buffer overflow automatically,is proposed and implemented based on Windows debugging framework.The operation mode of LVF is briefly introduced.Positioning method used LVF is discussed,and the framework design of LVF is presented.Finally,experiments are given,which verify that LVF can effectively achieve the automatic positioning of the vulnerable function in a buffer overflow.