Linux缓冲区溢出攻击检测与防范技术

Techniques on Prevention and Detection of Buffer Overflow Attacks on Linux

缓冲区溢出攻击已成为黑客进行系统攻击的主要手段之一。简要分析了该攻击的基本原理 ,提出了使用安全的C函数库和控制内核的系统调用两种检测防范策略 。

Buffer overflow has become an important way for the hackers to attack the system.This paper discusses the principle of buffer overflow attacks,proposes a method of providing a safe C library,an approach to the control of system calls and the features of thems.