格式化串读写越界防御虚拟机的研究

Research of Reading-writing-cross-border Defense Virtual Machine for Format String

针对现有格式化串读写越界防御存在的问题,设计一种能够防御格式化串读写越界的虚拟机。通过分析格式化串读写越界防御虚拟机的行为,提出一种新的格式化串读写越界防御模型,给出了格式化串读写越界防御虚拟机的概要设计和详细设计。实验表明,该防御虚拟机能够加载和执行用户程序,能控制程序的执行流程,记录越界发生时进程内的内容,并提供保护、检测、响应和恢复功能。

Aim to the probelems of reading-writing-cross-border defense for format string,design a virtual machine that can defense reading-writing-cross-border action for the formatted string.By analyzing the reading-writing-cross-border action of the formatted string,puts forward a new kind of reading-writing-cross-border defense model for format string,and gives the summary and detailed design the reading-writing-cross-border defense virtual machines Experiments show that the defense virtual machine can load and execute the user programs,and can control the execution process,record the content of the cross-border occurs within a process,and provide the function of the protection,the detection,the response and the recovery.