Discussion of SSH Buffer Overflow Loopholes and Security Ward
Yang Song · 2008
Safety Shell (SSH : Secure Shell) is an application layer security protocol, provides communication between the two sides of identity authentication, communications data encryption, data integrity verification, and other security services, according to its function, falls into an Application Layer Virtual Private Network (VPN) protocol. This Paper outlines the SSH protocol basic concepts, then launchs from SSH sessions to the end of the whole process and the expansion of the agreement in detail the research and analysis; SSH summarizes the agreement, there is a number of shortcomings and deficiencies, and related work experience, and proposes the proposal that a series of actual work process can refer to;researchs and analyzes some security loopholes, especially for Buffer Overflow Vulnerability, revises its vulnerability to make up for the loopholes, and has embedded authentication methods in response to a question the. In addition, according to the actual needs of the application, based on the Windows platform for the SSH protocol to facilitate management and improve the availability of SSH.