基于缓冲溢出漏洞的攻击及其预防研究综述

A SURVEY OF BUFFER OVERFLOW ATTACKS AND DEFENSES

近十几年来 ,由操作系统缓冲区溢出漏洞导致的攻击带来了严重的网络安全问题 ,它的安全危害级别相当高。如何有效地消除基于缓冲区溢出的攻击 ,可以消除一个相当普遍的安全隐患。本文针对缓冲区溢出漏洞的基本原理 ,系统分析了攻击过程 ,比较了不同的防御手段及其优缺点。

Buffer overflow vulnerabilities have endangered seriously the network security for the past decade.In the first place of this paper,the principles and causes of the buffer overflow is introduced.Secondly how the buffer overflow attacks happened are analyzed.Thirdly ways to prevent the buffer overflow attacks are viewed at different angles.Finally,ways to eliminate the buffer overflow by several composite defense measures are proposed.