緩沖區(qū)溢出攻擊防御技術的研究.pdf

1、揚州大學碩士學位論文緩沖區(qū)溢出攻擊防御技術的研究姓名：袁賦超申請學位級別：碩士專業(yè)：計算機軟件與理論指導教師：殷新春嚴芬20100401AbstractBufferoverflowattacksistheattacksusingbufferoverflowvulnerabilityBufferoverflowmeanswhenthecomputerfilledthebufferwithmoredatathanitsowncapacity

2、theoverflowdatacoversthelegaldataBufferoverflowisaverycommon，verydangerousvulnerabilitywidelyusedinopratingsystemsandapplicationsoftwares111euseofbufferoverflowattacksCancausefailingofprograms、systemcrash、restartasaresul

3、tMoreserious，itCanrunnon—authorizedinstructionorevenobtainsystemprivilegesandthendoillegaloperationsCurrentlyinthenetworkanddistributedsystemsecuritymorethan50％ofwidelyusedvulnerabilitiesarebufferoverflowvulnerabilities，

4、includingthemostfamousexamplethewormusingfingerdvulnerabilityin1988Therefore，thedefensemethodofbufferoverflowattackhasbeenaconcernInthispaperwestudythemethodstodefensebufferoverflowattacks，themaincontributionsareasfollow

5、s：(1)Combinedwiththelatestresearchesonbufferoverflowattackdetectionmethods，wecarryonsystemanalysisandresearchtothetechnique，andcomparedifferentmethodswitlleachotherTheresultsareusefulandCanbeputintothefuturebufferoverflo

6、wattackdetectionresearches(2)Todefendagainstbufferoverflowattacks，weintroducerandomizationtechniquesThreemajorclassesofexistingmethodsofrandomizationhavebeensystematicstudiedWeanalysistheadvantagesanddisadvantagesofthese

7、methodsofrandomizationandtheattackstothesemethods，proposetheimprovingmethodofrandomizationtechniques(3)Usingrandomizationgtechniquestodefensebufferoverflowattacks，CanpreventbufferoverflowattacksinacertainextentIntheconte

8、xtofthiswork，weproposesanewrandomizationgmethodbaseondataprotecttodefensebufferoverflowattackseffectively111emethodweproposedcaileffectivelypreventavarietyofbufferoverflowattacks，alsoithasamorelessconsumptioninperformanc

9、eandmemoryspace(4)Analysediffirentrandomizationgworks，mainlydrawnthemethodstodefenseagainstbufferoverflowattacksCompareddifferentmethods，proposesanewdirectionusingrandomizationgtodefensebufferoverflowattacksByanalyzingth