资源描述:
《缓冲区溢出攻击原理及防范_xxx》由会员上传分享,免费在线阅读,更多相关内容在行业资料-天天文库。
1、缓冲区溢出攻击原理及防范作者姓名:XXX班级:计算机网络XXX学号:2200951XXX指导教师:XXX教授摘要缓冲区简单来说是一块连续的计算机内存区域,可以保存相同数据类型的多个实例,缓冲区溢出是指当计算机向缓冲区内填充数据位数时超过了缓冲区本身的容量溢出的数据覆盖在合法数据上,理想的情况是程序检查数据长度并不允许输入超过缓冲区长度的字符,但是绝大多数程序都会假设数据长度总是与所分配的储存空间相匹配,这就为缓冲区溢出埋下隐患.操作系统所使用的缓冲区又被称为"堆栈".在各个操作进程之间,指令会被临时储存在"堆栈"当中,"堆栈"也会出现缓冲区溢出。缓冲区溢出
2、是最常见的安全漏洞,针对缓冲区溢出的漏洞进行攻击,是很常见的攻击手段,可以使本地用户获得超级用户权限,也可以使外部攻击者通过网络直接进入系统。本文详细分析了缓冲区溢出的基本原理,描述了利用缓冲区溢出漏洞进行攻击的基本方式,并通过对一段实例程序的溢出和构建攻击语句直观的演示了缓冲区溢出的形成过程及其攻击原理,最后提出了防范缓冲区溢出的有效措施。关键词:缓冲区溢出堆栈漏洞30Abstract30 Simply ,buffer is a continuous computer memory area, can keep the same data types o
3、f multiple instances, buffer overflow is when computer to the buffer filled with data figures within the capacity of the buffer itself more than the data covered in legal spill data, the ideal situation is not allowed to check the data length program more than the length of the in
4、put buffer characters, but most of the program will be always with the assumption that data length distribution of storage space match, this is the buffer overflow buried hidden trouble. Operating system used by buffer is known as the "stack". In between each operation process, th
5、e instructions will be temporarily stored in the "stack" of "stack" also can appear buffer overflow. Buffer overrun is the most common security flaws in the buffer overflow vulnerability to attack, it is very common attack method, can make local users get super user permissions, a
6、lso can make the external attackers through the network directly into the system.This paper analyzes the basic principle of buffer overflow, describes the use of buffer overrun vulnerabilities to attack the basic way of, and through the example of a program and the construction of
7、 overflow attack statement intuitive demonstrates buffer overflow the forming process and the principle of attack, finally puts forward the countermeasures of buffer overflow effective measures.Keywords: bufferoverflow Stack shellcod30目录摘要1Abstract2绪论1第一章缓冲区溢出基本原理21.1栈缓冲区溢出21.2HEA
8、P/BSS缓冲区溢出41.2.1重要性41.2.2相关概念介绍41