检索结果-内蒙古大学图书馆

Buffer Overflow Detection on Binary Code

Journal of Shanghai Jiaotong university(Science) 2006年第2期11卷 224-229页

作者：郑燕飞李晖陈克非 School of Information Security Eng. Dept. of Computer Science and Eng. Shanghai Jiaotong Univ. Shanghai 200030 China

Most solutions for detecting buffer overflow are based on source code. But the requirement tor source code is not always practical especially for business software. A new approach was presented to detect statically the potential buffer overflow vulnerabilities in the binary code of software. The binary code was translated into assembly code without the lose of the information of string operation functions. The feature code abstract graph was constructed to generate more accurate constraint statements, and analyze the assembly code using the method of integer range constraint. After getting the elementary report on suspicious code where buffer overflows possibly happen, the control flow sensitive analysis using program dependence graph was done to decrease the rate of false positive. A prototype was implemented which demonstrates the feasibility and efficiency of the new approach.

关键词： binary code buffer overflow integer range constraint feature abstract graph

来源：评论

学校读者我要写书评

暂无评论

Buffer Overflow Detection on Binary Code

引用

Journal of Shanghai Jiaotong University(Science) 2006年第2期E-11卷 224-229页

作者： ZHENG Yan-fei LI Hui CHEN Ke-fei School of Information Security Eng. Shanghai Jiaotong Univ.Shanghai 200030China Dept.of Computer Science and Eng. Shanghai Jiaotong Univ.Shanghai 200030China

Most solutions for detecting buffer overflow are based on source code. Butthe requirement for source code is not always practical especially for business software. A newapproach was presented to detect statically the potential buffer overflow vulnerabilities in thebinary code of software. The binary code was translated into assembly code without the lose of theinformation of string operation functions. The feature code abstract graph was constructed togenerate more accurate constraint statements, and analyze the assembly code using the method ofinteger range constraint. After getting the elementary report on suspicious code where bufferoverflows possibly happen , the control flow sensitive analysis using program dependence graph wasdone to decrease the rate of false positive. A prototype was implemented which demonstrates thefeasibility and efficiency of the new approach.

关键词： binary code buffer overflow integer range constraint feature abstractgraph

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：