Abstract: This paper first describes the technical principles and features of network attack based on buffer overflow, then analyzes the recovery methods of buffer overflow from programming, detecting, data structure designing and program executing. At last, it presents some methods to prevent this kind of attacks.

摘要： 给出了缓冲区溢出的原理，分析了利用缓冲区溢出漏洞进行网络攻击的方法及其特征；从程序编写、程序检测、数据结构设计以及程序执行控制等多个角度对防止缓冲区溢出攻击进行了分析，提出了遏制利用缓冲区溢出漏洞进行攻击的一些方法。

关键词: 缓冲区溢出, 堆栈溢出, 黑客攻击, 防御, 缓冲区检测, 缓冲区不可执行

CLC Number: 

• TP309.5