静态检测缓冲区溢出漏洞

Statically Detecting Buffer Overflow Vulnerabilities

缓冲区溢出漏洞是目前惟一最重要最常见的安全威胁。文中分析了防止缓冲区溢出攻击的运行时方法的不足。介绍了一种静态检测缓冲区溢出漏洞的方法及工具。给源代码添加注解,用注解辅助静态分析,用这种方法能够在软件交付使用前,检测出程序中潜在的安全漏洞。

Buffer overflow vulnerabilities may be today's singlemost important and most common security threat.In this paper,first analyzes the shortcomings of run-time defenses of buffer overflow attacks, and then presents an approach and a tool to statically detect buffer overflow vulnerabilities.By adding annotations to source code and using annotation-assisted static analysis,the approach can detect potential safety vulnerabilities in the programs before the software is deployed.