An Buffer Overflow Automatic Detection Method Based on Operation Semantic

摘要

Buffer overflow is the most dangerous attack method that can be exploited. According to the statistics of Computer Emergency Readiness Team (CERT), buffer overflow accounts for 50% of the current software vulnerabilities, and this ratio is going up. Considering a subset of C language, Mini C, this paper presents an abstract machine model that can realize buffer overflow detection, which is based on operation semantic. Thus the research on buffer overflow detection can be built on strict descriptions of operation semantic. Not only the correctness can be assured, but also the system can be realized and extended easily.