摘要
Windows异常处理机制与软件安全关系密切,先概述Windows异常处理机制的一般概念(系统提供的支持、高级语言和编译器的封装等),接着讨论其在软件保护方面的应用,最后讨论其被用于软件漏洞攻击的原理以及针对性的改进。异常处理机制是Windows系统提供的一套强大而优雅的处理约定,在程序设计和信息安全领域随处可见,程序员、信息安全相关人员等都应当对其有深入的研究。
Windows exception handling mechanism is closely- related with software security. This paper first briefs this mechanism,including its system support,high-level languages and compiler encapsulation and so on,then analyzes its applications in software protection,finally discusses the principle of its applications in buffer overflow attack and in-accordance improvements. Windows exception handling mechanism is a strong and elegant agreement provided by OS and used widely in software industry,and could seen anywhere in programming and information security,and thus the programmers and infosec-related persons should have an in-depth study of it.
出处
《信息安全与通信保密》
2011年第4期58-60,共3页
Information Security and Communications Privacy
关键词
异常处理
软件安全
漏洞攻击
exception handling
software security
vulnerability attack