【摘要】 代码注入式攻击方法已经成为针对内存攻击的典型代表,缓冲区溢出攻击是其中最常用的一种代码注入攻击方法。它依靠修改程序的控制流指向,使程序转向预先注入的恶意代码区,以取得系统权限。提出了一种基于数据保护的随机化方法,即通过保护程序内的指针和数组来有效地防御缓冲区溢出攻击的方法。更多还原

【Abstract】 Code injection attack has become a typical representative of the attacks against memory,in which buffer overflow attacks are the most commonly used.It relies on the change of control-flow,lets the program point to the malicious code in order to obtain the root rights.This paper presented a method using randomization based on data protection,wiich can defend buffer overflow attacks effectively,through the protection of pointers and arrays.更多还原