Software security detection method for code reuse programming

Abstract

The present invention provides a software security detection method for code reuse programming. The method comprises five stages: instruction sequence disassembling, basic functional code snippet collecting, attack code generation, attack code recording and software security reporting. In the instruction sequence disassembling stage, a byte sequence before returning an instruction is disassembled. In the basic functional code snippet collecting stage, an instruction sequence collected in the previous stage is input; it is determined whether the instruction sequence belongs to a basic function; and the instruction sequence, if belonging to the basic function, is collected as a code snippet of the basic function. In the attack code generation stage, code snippets of all basic functions are combined according to a predefined attack template to generate an attack code; for a code snippet that has a side effect and that is contained in the attack code, the side effect of the code snippet is eliminated by using a side effect elimination policy, so as to ensure normal implementation of the function of the attack code. In the attack code recording stage, the attack code, from which the side effect is removed successfully, is recorded in a corresponding test result file.

Description

technical field [0001] The invention relates to software safety detection, in particular to a software safety detection method for detecting whether software is vulnerable to code reuse programming attacks. Background technique [0002] At present, the attacks on software are characterized by diversification and automation, which poses serious challenges to system and software security. With the deployment of defenses such as data execution prevention and address randomization on operating systems, traditional code injection attacks are no longer effective. However, code reuse programming does not need to inject attack codes. By reusing code fragments in the target program to implement attacks, these security defense technologies can be bypassed, which poses a serious threat to computer system security. Therefore, it is of great practical significance to carry out security detection for code reuse programming on software, which can effectively alleviate the attack of code r...

AI Technical Summary

Problems solved by technology

With the deployment of defenses such as data execution prevention and address randomization on the operating system, traditional code injection attacks are no longer effective

However, code reuse programming does not need to inject attack codes. By reusing the code fragments existing in the target program to implement attacks, these security defense technologies can be bypassed, which poses a serious threat to the security of computer systems.

Images