資料載入中.....
|
請使用永久網址來引用或連結此文件:
https://ir.lib.ncu.edu.tw/handle/987654321/106328
|
| 題名: | ARMORY: An automatic security testing tool for buffer overflow defect detection |
| 作者: | 許富皓;Chen, Li-Han;Hsu, Fu-Hau;Hwang, Yanling;Su, Mu-Chun;Ku, Wei-Shinn;Chang, Chi-Hsuan |
| 貢獻者: | 資訊電機學院資訊工程學系 |
| 關鍵詞: | Buffers;Computer information security;Computer programs;Defects;Finishes;Software;Source code |
| 日期: | 2013-10-01 |
| 上傳時間: | 2026-04-23 13:17:53 (UTC+8) |
| 出版者: | Elsevier Ltd.;Elsevier Ltd |
| 摘要: | 摘要： [Display omitted] ► ARMORY detects buffer overflow defects automatically inside kernel. ► It classifies three types of buffer overflow defects: L2S, LOOP, and FISSION. ► It does not need any attack instance, any training phase, and source code. Program Buffer Overflow Defects (PBODs) are the stepping stones of Buffer Overflow Attacks (BOAs), which are one of the most dangerous security threats to the Internet. In this paper, we propose a kernel-based security testing tool, named ARMORY, for software engineers to detect PBODs automatically when they apply all kinds of testing, especially functional testing and unit testing, without increasing the testing workload. Besides, ARMORY does not need any attack instance, any training phase, or source code to finish its security testing. ARMORY can detect unknown PBODs. ARMORY not only can improve software quality, but also can reduce the amount of system resources used to protect a system. We implemented ARMORY in Linux kernel by modifying sys_read() system call and entry. S which deals all system call. Experimental results show that ARMORY can automatically detect PBODs when programmers test the functionality of their programs.
出版者： Elsevier Ltd
出版日期： 2013-10-01
出處： Computers & electrical engineering, 2013-10, Vol.39 (7), p.2233-2242
版權： 2012 Elsevier Ltd
識別號： ISSN: 0045-7906
識別號： EISSN: 1879-0755
識別號： DOI: 10.1016/j.compeleceng.2012.07.005 |
| 顯示於類別: | [資訊工程學系] 期刊論文
|
文件中的檔案:
| 檔案 |
描述 |
大小 | 格式 | 瀏覽次數 |
|---|
| index.html | | 0Kb | HTML | 15 | 檢視/開啟 |
|
在NCUIR中所有的資料項目都受到原著作權保護.
|
