摘要： 通过监测系统调用及其返回地址的方法,利用代码段和堆栈在读、写以及执行权限方面的差异,给出了一种Linux系统中防缓冲区溢出漏洞的新方法,并加以具体实现。该方法不需要重新编译操作系统和应用程序,而且对系统性能影响较小。

关键词: 缓冲区溢出, 代码段, 堆栈, 系统调用

Abstract: This article gives a new method of anti-buffer overflow, based on monitoring the syscalls and the difference of read-write-execute rights between code segment and stack. The method has little impact to the performance and needn't re-compile the OS and applications.

中图分类号: 

• TP309