A stack buffer overflow vulnerability detection method based on a program diagram

Abstract

The invention discloses a stack buffer overflow vulnerability detection method based on a program diagram. The method comprises the steps that 1, after source codes are statically analyzed, constructing a corresponding program diagram; 2, traversing the program chart to find a danger function to obtain an overflow point position; 3, calculating the address offset between the buffer space operatedby the overflow point comparison function and the size of the space to be covered; And 4, judging whether address offset occurs or not to obtain a vulnerability detection result, Wherein the danger function mainly aims at three danger functions of Strncpy (), Memcpy () and Gets (); for the Strncpy () and Memcpy () functions, buffer area space O and coverage space C of function operation are obtained, and for the Gets () function, only buffer area space O of the function needs to be obtained; For a Strncpy function, if the replication length n<O, there is no vulnerability, if the replication length n>O and O<C, there is vulnerability; For the Memcpy function, if the copy length n <O, there is no vulnerability, if n<O and O<C, then there is vulnerability; for the Gets function, if O = [0, infinite], then there is vulnerability..

Description

technical field [0001] The invention belongs to the technical field of information security, and relates to a stack buffer overflow vulnerability detection method based on a program graph. Background technique [0002] With the continuous development of computer technology, the demand for software in all walks of life is increasing, and more and more people enjoy the convenience and speed brought by information systems. The unavoidable problem in the continuous development of information technology is software vulnerability. In the process of software development, developers will make some mistakes, some fatal mistakes will cause serious consequences if they are not found out in time. Among all the current software vulnerabilities, buffer overflow is one of the most common security vulnerabilities. Therefore, the cause analysis of software vulnerability has increasingly become the focus of attention in the field of information security. [0003] The main cause of buffer o...

AI Technical Summary

Problems solved by technology

In 2001, a virus called CodeRed caused more than 300,000 computers running Windows to be attacked, causing huge economic losses

However, due to the inaccurate modeling of most static analysis tools, there is a high rate of false negatives and false positives in the results of buffer overflow vulnerability detection

In C and C++ languages, some copy functions and common external input functions are prone to buffer overflow when allocating memory and input length

Images