格式化字符串攻击检测算法

下载PDF

导出

摘要格式化字符串漏洞能对网络系统造成巨大的危害。该文探讨了格式化字符串漏洞的成因与危害性,并对格式化字符串攻击检测算法进行了详细的阐述与分析。

作者杜戈王子

机构地区东北大学软件学院

出处《电脑知识与技术》 2013年第8期5012-5014,5029,共4页 Computer Knowledge and Technology

关键词格式化字符串攻击检测算法

参考文献5

1Tsai T,Singh N. l,ibsafe 2.0:Protection Critical Elements of" Stacks[R].USA:Backing Ridge,N J07920,2001:1-16.
2SCUT/ TEAM TESO S. Exploiting Format String Vulnerabilities[EB/OI,]. http://www.comp.nus.edu.us/-saran/Exploiting Format String Vulnerabilities.pdf 2009.7.
3李鹏,王汝传,王绍棣.格式化字符串攻击检测与防范研究[J].南京邮电大学学报（自然科学版）,2007,27(5):84-89. 被引量：7
4沈晓斌.漏洞攻击检测与评价机制的研究[M].扬州:扬州大学出版社,2010.
5杜旭涛,邢存晓,周讧柱.格式化字符串漏洞研究[J].东南大学学报,2009(2).

1GERA R. Advances in format string exploiting [ J ]. Phrack Magazine,2002,11 (59) :1 -25.
2BOUCHAREINE P. Memory Bugs :_atexit[EB/OL]. http://doc. bughunter. net/buffer-overflow/atexit. html.
3CONOVER M. w00w00 Security Team. w00w00 on Heap Overflows [ EB/OL]. http ://www. w00w00. org/files/articles/heaptut. txt.
4RINGENBURG M, GROSSMAN D. Preventing format-string attacks via automatic and efficient dynamic checking [ C ]//Proceedings of the 12th ACM conference on Computer and communications security. 2005 : 354 - 363.
5SINNADURAI S. A comparison of techniques to prevent Format String Attacks[ EB/OL]. http ://www. comp. nus. edu. sg/- saravan 1/web/A comparison of Techniques to prevent Format String Attacks. pdf.
6TSAI T, SINGH N. Libsafe 2.0: Protection Critical Elements of Stacks [ R ]. USA : Basking Ridge, NJ07920,2001 : 1 - 16.
7WILANDER J, KAMKAR M. Comparison of Publicly Available Tools for Dynamic Buffer Overflow Prevention [ C ]//10th Network and Distributed System Security Symposium. 2003:149 -162.
8NEWSHAM T. Format String Attacks [ EB/OL]. http://www. lava. net/- newsham/format-string-attacks. pdf.
9TESO S T. Exploiting Format String Vulnerabilities version 1.2 [ EB/OL]. http://www. crhc. uiuc. edu/- grier/projects/overflows/formatstring-1.2. pdf.
10RIVAS J B. Overwriting the . dtors section[ EB/OL]. http://doc. bughunter. net/buffer-overflow/dtors .html.

电脑知识与技术

2013年第8期

内容加载中请稍等...