緩沖區(qū)溢出漏洞利用與防御研究.pdf

1、重慶大學(xué)碩士學(xué)位論文緩沖區(qū)溢出漏洞利用與防御研究姓名：羅衡峰申請學(xué)位級別：碩士專業(yè)：計算機軟件與理論（軟件工程）指導(dǎo)教師：向宏20051001重慶大學(xué)碩士學(xué)位論文英文摘要IIABSTRACTBufferoverflowattackisthemainmeasureofhacker’sattack.Ithasdonememeharmtoinfmationsecurity.Theexistingresearchesondefensivemea

2、suresarebehindschedule.Mostofthecurrentresearchesconcentrateontheexploitingdefenseofcertainvulnerabilitieswithoutacomprehensiveexplation.theexistingdefensivemeasuresstillhaveallkindsofshtages.Therefethispaperauthattempts

3、toconductacomprehensiveresearchonattackdefenseofbufferoverflowunderwindowsplatfm.Majprogressesofthispaperareasfollows:1.Presentationofanunifiedfunctionmodelofbufferoverflowexploitingprograms.Basedontheprinciplesexploitin

4、gmeasuresofbufferoverflowvulnerabilityanunifiedfunctionmodelofbufferoverflowexploitingprogramisbroughtfward(includingoverflowmoduledisttionmoduleflowjumpmoduleattackmodulelimitbreakingmoduleconcealmodule).2.Puttingfwardo

5、ftheoverflowlocalizationfmula(Z＝(0xYY0x41)10＋(0xXX0x41)).Locatingaccuratelybufferoverflowpointisoneofthekeyfactsfexploitingvulnerabilitysuccessfully.Localizationfmulaispresentedinthispaperfthispurpose.3.Realizationofbuff

6、eroverflowattackkeytechnique.Theshellcodeofkeytechniqueaboutbufferoverflowattackisrealizedinthepaper(includingbreakingthroughoperatingsystemitsfirewalluploadingdownloadingattackfiles).4.Presentationofbufferoverflowattack

7、modelbasedonCategythey.BufferoverflowattackmodelbasedonCategytheyisbroughtfwardinthepaperbyexplingtheprocessofbufferoverflowattacksystematicallysummarizeitsattackprocess.5.Presentationofdefensivemeasureagainstattackproce

8、ssthreestages.Crespondingdefensivemeasureispresentedagainstthethreestagesofattackprocessbyresearchingofbufferoverflowdefensetechnique.Thispaperisoneoftheseriesresearchresultsofaprovincialministeriallevelproject—theoveral