缓冲区溢出漏洞是当前互联网中存在的最主要的威胁之一。该文先讨论了缓冲区溢出漏洞的产生原理和一般的攻击手段,然后分析了利用缓冲区溢出漏洞的攻击代码,给出了攻击代码的主要特征。最后,讨论了如何利用这些特征,来防范缓冲区溢出攻击的发生。 Buffer overflow vulnerability is one of the most important threats in the current Internet. This paper firstly discusses the generating principle of buffer overflow vulnerabilities and the general attack methods. Then it analyzes the attack code which utilizes the buffer overflow vulnerability and gives the main features of the attack code. Finally, we discuss how to use these features to prevent buffer overflow attacks.