基于危险函数的缓冲区溢出检测方法的研究与实现

RESEARCH AND APPLICATION ON RISK FUNCTION BASED BUFFER OVERFLOW DETECTION METHOD

分析缓冲区溢出原因和现有检测技术,提出一种基于危险函数的缓冲区溢出检测流程。该流程首先对反汇编代码中的危险函数的普通形式和展开形式进行定位,然后对危险函数进行参数分析和动态检测,验证危险函数能否发生溢出,最后通过人工分析技术,进一步对参数分析和动态检测的结果进行验证。给出缓冲区溢出检测流程的具体实现。实验结果表明该检测流程是有效的。

Buffer overflow is analyzed for its reasons along with present buffer overflow detection technologies.A risk function based buffer overflow detection procedure is put forward.The procedure at first locate the general form and unfolded form of risk functions from the disassembly code,then carries out parameter analysis and dynamic detection on them to judge whether those risk functions may cause overflow,and finally by artificial analysis technology performs further verifications on the results of parameter analysis and dynamic detection.The detailed implementation of the buffer overflow detection procedure is given.Experiment result validates the detection procedure.