Detecting buffer overflow vulnerabilities in C programs based on colored petri nets

摘要

Buffer overflow (BO) vulnerability is one of the most crucial threats to the security of software system, a new method was proposed to ensure the safe of program before execution. To ensure the compilation process more secure, this paper adopts the method based on CPN, first we should convert c program into a CPN model map, and then simulate the process of program execution. Finally, the results of program execution can be obtained, if the program is wrong, you can detect the error without execution, and then further improved. Understanding CPN furthermore, we know the method can also be further transformed into a method that can be automated; this can greatly reduce the workload.