摘要： 缓冲区溢出攻击是Internet上危害最大、最广泛的一种攻击手段。该文在讨论缓冲区溢出攻击的内存模型和工作原理的基础上,提出了安全编程的概念与主要原则,并在整合前人工作的基础上,系统地提出了贯穿软件生命期,包括编程开发、编译测试、安全配置使用3个阶段的完整缓冲区溢出防范体系模型。
关键词:
缓冲区溢出,
堆栈,
安全编程,
防范体系
Abstract: Exploit attack is a huge safety threat in Internet. As a basis, its memory model and working way are discussed firstly. Then the complete defense system model is presented,including programming development,programming test and safe deploy.Which runs through the whole life period of software. Meanwhile the conception and main principle of safe programming is presented, which is very meaningful in improving the quality of software developing.
中图分类号:
王磊,张玉清,王力,郎良. 系统缓冲区溢出攻击防范体系的建立[J]. , 2004, 30(12): 107-109.
WANG Lei1,2,3,ZHANG Yuqing1,2,WANG Li3,LANG Liang1,2. Building of Exploit Attacking Defense System[J]. , 2004, 30(12): 107-109.