远程缓冲区溢出攻击的原理分析与检测

The Principle and Detection of Remote Buffer Overflow Attack

基于缓冲区溢出的攻击是目前使用相当普遍的一种黑客技术,该文分析了这种攻击的基本原理,在此基础上提出了利用NDIS开发包进行检测的一般方法,并且用实验证实了这种方法的有效性。

Buffer overflow is a technology widely used by hackers to attack computer.In this paper the principle of such kind of attack is analyzed.Then a method,which uses NDIS exploitive packet to detect this kind of attack is proposed.Experiment results prove its validity.