Windows Platform Buffer Overflow Vulnerability Detection Technology

With the wide application of Internet, network attacking based on Internet becomes one of the most important information war forms. So network attack technology is an important weapon. To perform a successful network attack, an attacker should firstly gather vulnerability information of the target networks. As a result, researching the buffer overflow detecting technology is important to nation security.Buffer overflow attacks have become a very normal kind of attack recently 10 years. According to a majority of computer security statistics, buffer overflow commits over 80 percents of all computer related attacks. Buffer overflow attacks can make a host controlled completely or partly. Buffer overflow exits in all kind of operating systems and softwares, so buffer overflow attacks are the most harmful problems of information security.The paper discusses design and implementation of the buffer overflow detecting system in windows operating system, the research work mentioned in the paper is mainly about:1. It analyzes and summarizes the theory of the buffer overflow, and the ingredients probably causing buffer overflows.2. It analyzes and researches different kinds of buffer overflows: stack buffer overflow, heap buffer overflow, BSS buffer overflow, and deeply researches stack buffer overflow and heap buffer overflow.3. It analyzes the exiting detecting and defending technologies of buffer overflows.4. It designs and implements the buffer overflow detecting system in windows operating system. The key technologies: stack buffer overflow detecting technology, heap buffer overflow detecting technology and debugging technology.5. It describes the function test, and experimentation has proved that the system reaches the anticipative design.