Dissertation > Excellent graduate degree dissertation topics show

Buffer Overflow Vulnerabilities Detection System Based on Constraint System Model

Author: ChenZuo
Tutor: WangZhenYu
School: PLA Information Engineering University
Course: Applied Computer Technology
Keywords: Buffer Overflow Vulnerabilitie Static Analysis Constraint Based Analysis Alias Analysis Model Checking
CLC: TP393.08
Type: Master's thesis
Year: 2010
Downloads: 73
Quote: 0
Read: Download Dissertation

Abstract


Software safety detecting is playing an important way to protect Computer System and avoid being attacted, depending on Static Analysis’s excellences such as higher automatization, researching the technologies of Static Analysis is very important.Aiming at Buffer Overflow Vulnerability, this paper has researched its base principle, and combined constraint analysis and model checking technology which have been applied in detecting BOVs sepatately, through following analysis to insert information as buffer attributes initialization、attributes transfer and attributes assert,then has constructed buffer Attributes constraint system, and adopted model checking technology to solve constraint system in order to detect BOVs among c programs.For the problem of constraint analysis’accuracy, this paper has brought forward alias analysis algorithm during process based on GCC Abstract Syntax Tree, by pointer variable analysis this algorithm has generated alias information assemble, and has finished the exchange mapping between assemble element attributes and attributes of alias buffer information, so the accuracy is increased effectively.Based on the analysis of pivotal technology above, this paper has designed a prototype system to detect BOVs based on constraint system model checking, the testing result shows that this prototype system can discover typical known vulnerabilities,and for unknown vulnerabilities this system aslo can locate effectively.

Related Dissertations

  1. Research on the Methods for Detecting Mismatch of Web Services Based on Bounded Model Checking,TP311.52
  2. The Research of Japanese Primary Music Textbooks,G623.71
  3. Generate Security-relevant Behavior Model of Java Source Code Based on Extended Push Down Automaton,TP311.52
  4. AVIC International Plaza Building, structural stability analysis,TU973.2
  5. Based on Multi-granularity dependency graph change impact analysis method,TP311.53
  6. Based on the finite element analysis to improve the design of medium-duty truck chassis and Test Research,U463.32
  7. A Design of a Driven System for an Adaptive Wing Based on Stepping Motor,V224
  8. Analysis and Evaluation of Some Heavy Truck Drive Axle Housing’s Static and Dynamic Characteristics,U463.218.5
  9. Optimal Design of Synchronous Dual-drive Exact Horizontal Machining Center,TG659
  10. Non-linear Analysis of Multi-tower and Self-anchored Suspension Bridge Based on Stochastic Finite Element,U448.25
  11. Research on Bus Rollover Safety and Process Development,U461.91
  12. The Structure Analysis of the Agricultural Truck Based on FEM Model,U463.32
  13. Topology Optimization of 6×6 Tyle Cross-Country Vehicle Frame,U463.32
  14. Mechanical Property Analysis of GETM12P60 Permanent-magnet Synchronous Traction Machine,TU857
  15. Structural Finite Element and Modal Analysis of Plate Shearing Machine,TG333.21
  16. Research on Abstraction for Model Checking Cache Coherence Protocol,TP332
  17. Temporal Logic Model Checking Based on Behavior Research and Application,TP311.52
  18. The Design and Implementation of Student Information Management System Applied to the University for Aged,TP311.52
  19. A Study on Fitness Calculation Problem in Evolutionary Testing of C Program,TP311.53
  20. The Application Study on Formalism of Multi-Party Non-repudiation Protocols on SVO Logic,TP393.08
  21. SPIN protocol based on formal analysis and verification,TP393.04

CLC: > Industrial Technology > Automation technology,computer technology > Computing technology,computer technology > Computer applications > Computer network > General issues > Computer Network Security
© 2012 www.DissertationTopic.Net  Mobile