Research On Technologies Of Attacks And Detections Of Buffer Overflow Vulnerabilities

The thesis makes a thorough and systemic study of techologies of buffer overflow attacks and detections in the network security field.Firstly, it analyzes not only research background of relative project, but also the research status and developing trends of home and abroad in this field. it put forward the research content of the project base on the previous analyses.Secondly, the thesis makes thorough research on techologies of buffer overflow attack theory, attack kinds, detection of vulnerabilities from three aspects.Since the buffer overflow detection based on the hardware protection plot has become the trend in the couple of years. This paper lays the effort on the hardware level,and introduces the study of some reletive institutions.The project Minos put forwards a novel detection for the buffer overflow attacks, but this model is not well developed. In this paper, we discuss these deficiencies, propose an improved model based on the Control Flow Integrity, and give out the practical analysis of the model as well as the conclusion.Besides, The return address protection based hardware is an important strategy. Thus, we firstly introduce the implementation of the exist methods in detail. And then, we discuss the respective Secure Instructions, represent the examples which could pass the protect detection, and point out the shortcomings of those rules.In order to solve these problems, we design a set of new Secure Instructions, and their function and performance are all tested.Finally, we draw a conclusion for this paper and future direction in this field is discussed.