Dissertation > Excellent graduate degree dissertation topics show

Dynamic Detection of Buffer Overflow Vulnerabilities in Binary Environment

Author: QiuJing
Tutor: ZhangHong
School: Harbin University of Science and Technology
Course: Applied Computer Technology
Keywords: Buffer overflow Dynamic detection Disassemble Library function recognition
CLC: TP309
Type: Master's thesis
Year: 2009
Downloads: 155
Quote: 0
Read: Download Dissertation

Abstract


Buffer overflow vulnerability is a security vulnerability in various types of operating systems and programs are widespread, and it was most hackers use vulnerabilities. Most buffer overflow detection tool is based on the source code, which greatly limits the scope of the use of tools. Traditional binary environment static recognition model, there are some inherent defect, mainly concentrated in the pointer aliasing as well as the variable type identification. This paper presents a dynamic combination of static technology discovery of binary vulnerabilities make up most of the defects. Start from the analysis of the x86 CPU architecture and instruction details decompile binary files, virtual execution environment VM design. VM design, design and real CPU IA-32 execution environment that can run native x86 instruction. Through VM, ScS instruction execution state, the tracking of changes in the register, to solve the problem of a pointer alias. By recording the VM virtual memory each instruction fetch address, the last statistics calculated each memory access instructions actually access the address of the variable to solve the precise identification of the variables. Modern program contains a number of library functions. In order to avoid as much as possible of these library functions, this paper presents a new the Quick library function recognition technology. New fast library function recognition technology relative to existing technology, to improve the recognition accuracy, but the storage and reconstruction of recognition library complex. In the control flow analysis, the reference interval graph theory, graph theory and program flow graph is divided into disjoint interval subgraph. Through the simplicity of interval graphs, and gradually identify nested control structure of the program flow graph. Calculated in the data flow analysis, the conventional data flow equations for binary environment is characterized by a simple and effective type of recognition algorithm. For unsafe function calls and write memory cycle string copy operation, write memory cycle due to overflow issue, a flow-related, context-detection algorithm. Cycle key attributes recognition once again combined with the VM to calculate the cycle status difference, and found the amount of change, which addresses the calculation of the control variables and control displacement. Finally, buffer overflow vulnerability detection model in the practical application, the experimental results show that the detection model can detect the executable common types of buffer overflow vulnerabilities.

Related Dissertations

  1. Based leon3 processor's memory monitoring module design,TP368.1
  2. Embedded systems hardware anti- buffer overflow attacks defense mechanism,TP393.08
  3. Research on the Buffer Overflow Technology Based on GCC,TP393.08
  4. An Effective Way to Prevent Heap-Based Buffer Overflow,TP393.08
  5. Research on Trojan Horse Detection under Windows Platform,TP309.5
  6. Technology of Buffer Overflow Detection,TP393.08
  7. Detection and Elimination of "Buffer-Overflow" Based on GECISM,TP393.08
  8. Buffer overflow vulnerability digging and exploit Methods,TP393.08
  9. Memory-based data mining fuzzing mechanisms of vulnerability,TP393.08
  10. The Research of Buffer Overflow Vulnerability on Windows Systems,TP393.08
  11. The Design and Implementation of a buffer overflow attack detection tools,TP309
  12. Research and Implementation of embedded application memory detection technology,TP368.1
  13. Research and Analysis on Buffer Overflow in the SPARC v8 Architecture,TP393.08
  14. The Research on Buffer Overflow Attacks of Oracle Database,TP311.13
  15. Buffer overflow attack analysis and real - time detection method,TP393.08
  16. Buffer Overflow Vulnerability Detection Technology,TP393.08
  17. Robot Image Dynamic Detection System Based on the Stereo Vision,TP242
  18. Dynamic Detection of Data Race Fault in Multi-threaded Program,TP311.11
  19. Software buffer overflow vulnerability automated excavation system,TP311.52
  20. Vulnerability Discovering Technique of Buffer Overflow Based on Reverse Analysis,TP393.08

CLC: > Industrial Technology > Automation technology,computer technology > Computing technology,computer technology > General issues > Security and confidentiality
© 2012 www.DissertationTopic.Net  Mobile