基于代码重用的漏洞利用及其防御技术研究

Code Reuse Exploit and Its Defense Technology Research

代码重用漏洞利用技术是突破DEP和WX的主流技术,其灵巧的攻击思想是现行漏洞利用技术的重要方向。因此研究基于代码重用漏洞利用技术及其防御方法,对提升程序安全和系统安全有着重要意义。论文将阐述基于代码重用的攻击原理和主要方法以及各种方法的优缺点和约束条件,总结当前主流防御技术的优缺点,并对下一步研究工作提出展望。

Thecode reuseattack is the mainstream technology to breakDEP and W＋X, its smart ideas is an important direction of the current exploit technology. Therefore, it is significant to study the technology of code reuse and its defense, which is of great significance to improve the safety and security of the system. The principle and main method of code reuse attack and the advantages, disadvantages of various methods, the constraints are described. This article will Summarize the advantages and disadvantages of the current mainstream defense technology, and put forward the prospect of the next research work.