基于双栈的缓冲区溢出攻击的防御

Stack Buffer Overflow Prevention Based on Dual-stack

摘要:

针对基于Intel 80X86结构的C/C++栈缓冲区溢出攻击的典型防御方法的不足，提出了一种基于双栈结构的缓冲区溢出漏洞的防御方法，设计并实现了一个ELF格式目标文件重构工具。实验结果表明，所提出的方法和开发的工具能在较低的性能开销下实现栈缓冲区溢出攻击的防御。

Abstract:

In this paper, classical buffer overflow prevention methods for Intel 80x86 architecture and C/C++ are analyzed. A new stack buffer overflow prevention method based on dual-stack is proposed due to the shortcomings of classical methods. Besides, an object file reconstructing tool for ELF format files is implemented with the dual-stack structure. Experimental results show that the proposed method and the tool is efficient for buffer overflow attack prevention with low overhead.