软件漏洞分析实验教学探究

Research on Experiment Teaching of Software Vulnerability Analysis

针对软件漏洞分析课程的特点,提出了该课程实验建设面临的困难和挑战,阐述了该课程实验建设的思路,然后从常用软件安全工具、栈溢出和堆溢出、Shellcode编写、其他内存攻击技术、其他类型软件漏洞、Windows安全机制、漏洞挖掘以及CVE分析和利用等知识点设计了实验内容,最后对整个实验教学内容进行了总结,指出后续的改进和建设方向。

According to the characteristics of the software vulnerability analysis,the construction difficulties and challenges of the course experiment are analyzed,construction guiding idea is proposed,and the experiment content is designed which includes the commonly used software security tool,stack overflow,heap overflow,Shellcode writing,other memory exploitation,other types of software vulnerability,Windows security mechanism,and CVE analysis and exploitation.At last,it summarizes the whole experimental teaching content,and points out that the improvement and direction of future construction.