| 基于函数签名的控制流监控方法 |
| |
| 引用本文： | 薛永岭,黄皓,张博. 基于函数签名的控制流监控方法[J]. 计算机工程, 2009, 35(9): 133-135 |
| |
| 作者姓名： | 薛永岭 黄皓 张博 |
| |
| 作者单位： | 南京大学计算机科学与技术系,南京,210093;南京大学计算机科学与技术系,南京,210093;南京大学计算机科学与技术系,南京,210093 |
| |
| 基金项目： | 国家自然科学基金，国家高技术研究发展计划(863计划) |
| |
| 摘 要： | 针对恶意篡改程序控制流攻击方式，提出一种监控程序控制流完整性的方法。对程序源代码进行扫描，以函数作为识别程序行为的基本粒子，利用函数调用执行的序列信息，建立表现程序原意的行为轨迹模型，利用该模型在运行期监控程序的执行流程。实验结果表明，该方法对篡改控制流的攻击起到了很好的防御作用。
|
| 关 键 词： | 程序控制流 源代码 函数调用序列 |
| 修稿时间： | |
Control-flow Monitoring Method Based on Function Signature |
| |
| XUE Yong-ling,HUANG Hao,ZHANG Be. Control-flow Monitoring Method Based on Function Signature[J]. Computer Engineering, 2009, 35(9): 133-135 |
| |
| Authors: | XUE Yong-ling HUANG Hao ZHANG Be |
| |
| Affiliation: | Department of Computer Science and Technology;Nanjing University;Nanjing 210093 |
| |
| Abstract: | Current software attacks often build on exploits that subvert machine-code execution. This paper proposes a new signature monitoring technique to enhance the control-flow integrity of program. It uses the execution of function as the basic item of the control-flow of the program. To get more exact intent of program, it scans the source code, and gets the information of function call sequence. According to the information, the model of program’s intent can be built. The model is used to monitor the program in runtime. Experimental results show the monitoring system makes the program more secure to reject the control-flow attacks. |
| |
| Keywords: | program control-flow source code function call sequence |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
| 点击此处可从《计算机工程》浏览原始摘要信息 |
|
点击此处可从《计算机工程》下载免费的PDF全文 |
