• 主题
高级搜索  >
历史搜索 清空历史
首页> 外文会议>2014 Zone 1 Conference of the American Society for Engineering Education >The cost of preventing a buffer overflow
【24h】

The cost of preventing a buffer overflow

机译：防止缓冲区溢出的成本

获取原文
获取原文并翻译 | 示例
页面导航
  • 摘要
  • 著录项
  • 相似文献
  • 相关主题

摘要

In the paper we have considered the main methods of buffer overflows, mitigation strategies, and their influence on the memory consumption. The analysis of various methods of stack protection has given us an estimate of the additional memory required for the implementation of specific techniques. The size of the additional memory depends on many factors including computer architecture, OS environment, programming languages used to create the program. For the protection methods considered in the paper, the cost may vary from the insignificant amount for prevention purposes, based on the careful analysis of input data in the program, to the use of Guard Pages when extra memory may include additional pages of the memory. In many cases developers have to use various mitigation strategies in order to make programs less vulnerable to buffer overflows. The main contribution of this paper is the analysis and evaluation of the additional memory required for the various methods of protection from buffer overflow. The current paper allows readers to understand the cost of these methods more clearly, which, in turn, will result in more efficient and secure programs. The results of this paper are useful for both software developers and the instructors who teach methods of secure programming.
机译：在本文中，我们考虑了缓冲区溢出的主要方法，缓解策略及其对内存消耗的影响。对各种堆栈保护方法的分析为我们提供了实现特定技术所需的额外内存的估计。附加内存的大小取决于许多因素，包括计算机体系结构，操作系统环境，用于创建程序的编程语言。对于本文中考虑的保护方法，成本可能会有所不同，从出于预防目的的微不足道的成本（基于对程序中输入数据的仔细分析）到使用保护页（当额外的内存可能包括额外的内存页）时使用。在许多情况下，开发人员必须使用各种缓解策略，以使程序更不容易受到缓冲区溢出的影响。本文的主要贡献是分析和评估了各种保护缓冲区溢出的方法所需的额外内存。当前的文章使读者可以更清楚地了解这些方法的成本，从而可以提高程序的效率和安全性。本文的结果对软件开发人员和教授安全编程方法的教员都非常有用。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱：kefu@zhangqiaokeyan.com

京公网安备：11010802029741号 ICP备案号：京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有

  • 客服微信

  • 服务号