欢迎您！东篱公司
退出
-
申报数据库
-
立项数据库
-
成果数据库
-
项目获奖数据库
中文摘要：
基于软件漏洞的APT（advanced persistent threat）攻击是目前互联网终端用户面临的最大安全威胁之一.传统的基于样本的检测方法往往滞后于攻击行动,无法在攻击发生时准确阻止攻击行为.针对悬浮指针（dangling pointer,DP）及索引溢出（index overflow,IOF）两类常见漏洞错误,通过分析漏洞的形成机理及防护条件下漏洞利用过程,提出一种针对上述两种错误的自动检测框架.该框架以二进制动态分析平台Pin为基础,使用动态插桩技术和污点技术,通过动态追踪指针的整个生命周期并对指针使用的合法性进行检查,从而准确检测出DP和IOF类型的漏洞攻击样本并提供详细的漏洞信息.
英文摘要：
The advanced persistent threat（APT）based on software vulnerability is one of the most serious security threats in the Internet.The traditional detection method based on malicious samples often lags behind this kind of attacks,and can not accurately detect attack behavior when the attack occurs.Dangling pointer（DP）and index overflow（IOF）are two kinds of common software vulnerabilities.After analyzing the root cause of both vulnerabilities,an automatic detection framework has been proposed for the detection of DP and IOF.This framework based on binary analysis platform Pin tracks dynamically the entire life cycle of pointers and checks on the legality of the use of pointers.It can accurately detect DP and IOF with acceptable performance overhead,and also provide detailed information of vulnerability.
同期刊论文项目
同项目期刊论文
期刊信息
位置：