Design and implementation of model for positioning vulnerable function in buffer overflow
WU Dong-ying · Jisuanji gongcheng yu sheji · 2010
Attacks by vulnerability exploiting of buffer overflow is one of the major threats in current security field.Buffer overflow vulnerability analysis generally starts from the vulnerable function which triggers the overflow,while a lot of time and effort is often required to spend on the positioning of the vulnerable function,achieving the automatic positioning of this function could shorten the response time significantly.In view of this situation,LVF,which is a model of positioning the vulnerable function in a buffer overflow automatically,is proposed and implemented based on Windows debugging framework.The operation mode of LVF is briefly introduced.Positioning method used LVF is discussed,and the framework design of LVF is presented.Finally,experiments are given,which verify that LVF can effectively achieve the automatic positioning of the vulnerable function in a buffer overflow.