论文部分内容阅读
软件漏洞对网络安全产生普遍而重大的威胁.漏洞利用检测就是在程序运行过程中采取主动措施监视系统的状态,在漏洞利用发生前,切断数据来源或者终止程序运行.污染传播分析的漏洞利用检测包括建立污染传播链表、污染传播、污染数据分析和污染数据追踪等几部分.基于污染传播的漏洞检测系统借助程序虚拟运行技术实现,并优化了漏洞利用检测的过程.与目前的污染分析漏洞检测系统对比实验表明,该方法具有漏洞检测准确率高、漏洞利用覆盖面广等特点.
Software vulnerabilities are a common and significant threat to network security.Unit detection is the use of proactive measures to monitor the state of the system during the operation of the program, before the exploit, cut off the data source or terminate the program run. Pollution dissemination analysis of exploit detection Including the establishment of pollution transmission linked list, pollution transmission, pollution data analysis and pollution data tracking and so on.A vulnerability-based detection system based on pollution transmission is realized by the virtual running technology of the program and the process of exploiting the vulnerability is optimized and the current pollution analysis vulnerability detection The system comparison experiment shows that the method has the characteristics of high accuracy of vulnerability detection and wide coverage of exploit.