【摘要】 软件漏洞攻击威胁日益严重。其中基于内存腐败漏洞的攻击最为普遍,如缓冲区溢出和格式化串漏洞。提出一种针对内存腐败漏洞攻击的自动错误定位方法。基于内存更新操作记录,可以回溯找到程序源代码中腐败关键数据的语句,从而提供有益的信息修复漏洞并生成最终补丁。更多还原

【Abstract】 Attacks exploiting vulnerabilities in software are becoming a great threat to the society.The most common attack method is to exploit memory corruption vulnerabilities such as buffer overflow and format string bugs.This paper presented a fault localization approach to automatically identify both known and unknown memory corruption vulnerabilities.Based on memory update log,we can trace back to the statement in source code that is tricked to corrupt critical data.The proposed techniques can provide useful information in fixing the vulnerabilities and generating the real patch.更多还原