博碩士論文 106522037 完整後設資料紀錄

DC 欄位 語言
DC.contributor資訊工程學系zh_TW
DC.creator曾子軒zh_TW
DC.creatorTzu-Hsuan Tsengen_US
dc.date.accessioned2019-8-19T07:39:07Z
dc.date.available2019-8-19T07:39:07Z
dc.date.issued2019
dc.identifier.urihttp://ir.lib.ncu.edu.tw:88/thesis/view_etd.asp?URN=106522037
dc.contributor.department資訊工程學系zh_TW
DC.description國立中央大學zh_TW
DC.descriptionNational Central Universityen_US
dc.description.abstract緩衝區溢位攻擊一直是常見的軟體攻擊手法之一,程式設計師一不 小心就有可能讓程式碼中隱含著緩衝區溢位漏洞,雖然漏洞本身容易修 補,但這個問題仍持續不斷地出現,且由於其能控制重要的資料結構, 所造成的傷殺力極大,因此勢必是需要解決的棘手問題之一。 過去有許多研究提出的防禦方法皆能偵測到緩衝區溢位的情形發生 並即時終止程式,本篇論文提出不同的作法,藉由靜態分析程式中介 碼,針對常造成緩衝區溢位的輸入函式做檢查與修補,直接防堵程式在 執行時發生緩衝區溢位,能正常且順利執行下去。本研究將系統實作為 LLVM Pass 的形式,讓使用者能自由選擇使用或融入編譯鏈結過程中的 一部分。zh_TW
dc.description.abstractBuffer overflow attacks have been one of the most common approaches of software attacks. This kind of vulnerabilities may occur if the programmer does not write code carefully. Although fixing the vulnerability itself is simple, buffer overflow attacks appear frequently and continuously. In addition, since it can control the important data structures, the damage it caused is quite severe. As a result, it is one of the thorny issues that have to be solved without a doubt. In the past, there are many research whose defense methods can detect the occurrence of buffer overflow and terminate the process immediately. This paper presents a different way: by statically analyzing the intermediate representation code, we can automatically check and patch the input functions which often cause buffer overflow, so that the program can run safely and correctly. Furthermore, we implement the system as a LLVM Pass; therefore, users can use it depending on their requirements. en_US
DC.subject緩衝區溢位zh_TW
DC.subject自動修補zh_TW
DC.subjectBuffer Overflowen_US
DC.subjectAutoPatchen_US
DC.titleVAP : An AutoPatch Mechanism for Buffer Overflow Vulnerabilities in Source Codeen_US
dc.language.isoen_USen_US
DC.type博碩士論文zh_TW
DC.typethesisen_US
DC.publisherNational Central Universityen_US

若有論文相關問題,請聯絡國立中央大學圖書館推廣服務組 TEL:(03)422-7151轉57407,或E-mail聯絡  - 隱私權政策聲明