Abstract:Buffer overflow vulnerability is currently one of the most serious software security vulnerabilities. Taking effective methods to detect buffer overflow vulnerabilities is of great significance to improve the robustness and security of software. After analyzing the principle of buffer overflow and various buffer overflow vulnerabilities, as well as comparing static with dynamic detection techniques, this paper presents a static detection method for buffer overflow based on abstract syntax tree, especially for vulnerabilities caused by string accessing of C source code. The proposed method first generates an abstract syntax tree for the source code by using the GCC compiler, and collects the characteristics of vulnerability by analyzing AST nodes. For the nodes associated with the buffer overflow, the method further gives a formal description of that characteristic so as to generate security attributed and constraint rules. By traversing the abstract syntax tree, the proposed method finally determines whether buffer overflow vulnerability exists in the source code. Experiments with 12 C programs were carried out on the Windows platform, and each program has been discovered at least one typical buffer overflow vulnerability. The experimental results highlight the feasibility and effectiveness of the proposed method, especially in the detecting out of range for a pointer, an array, and a structure object, as well as the buffer overflow vulnerability caused by some C library function calls.

Analysis of Buffer Overflow Attack Based on State Graph

Study on Buffer Overflow Attack and Detection Method

Detecting Buffer-Overflow Vulnerabilities in Smart Grid Devices via Automatic Static Analysis

Research on Principle and Defense of Buffer Overflow Attacks

Analysis and Study of Buffer Overflow Attack Detection Technology

Defense Buffer Overflow in Code Writing

AN APPROACH TO BUFFER OVERFLOW DETECTION BASED ON SYNTAX NODE ANALYSIS

Progress in Research on Buffer Overflow Vulnerability Analysis Technologies

Buffer Overflow Attacks Analysis and Real-time Detection

Study on Buffer Overflow Attack and New Protection Method

Static Buffer Overflow Detection for C/C++ Source Code Based on Abstract Syntax Tree

An Empirical Study on Detecting and Fixing Buffer Overflow Bugs

A new approach of network buffer overflow detection based on code execution simulation

Analysis and Realization of Network Attack of Overflow Vulnerability

Analysis and Using of Buffer OverFlow on Linux System

Analysis of Compiler Technology Enhancement ror Buffer Overflow Prevention

Buffer Overflow Attacks On Linux Principles Analyzing And Protection

Dynamic Buffer Overflow Prevention Based on K Circular Random Sequence

Stack Buffer Overflow Prevention Based on Dual-stack

Research on Detection of Vulnerability-Exploiting Technology Heap Spray

Research for Buffer Overflow Vulnerabilities Based on Multi-Dimensional Fuzzing Technology