- 學位論文
動態配置記憶體之安全保護機制
A Security Protection Mechanism for Dynamically Allocated Memory
摘要
並列摘要
The dynamic memory allocation mechanism is the target of many software security attacks. Through well-designed interactions with a vulnerable program to repeatedly request, release, or reference dynamically allocated memory, attackers can compromise the internal structure of a program and launch attacks. To prevent dynamically allocated memory from being accessed through the pointers that should be invalidated, we have designed a security mechanism, MallocList, to manage the pointers pointing to dynamically allocated memory. When a block of dynamically allocated memory is released, the corresponding content of the pointer is reset, and the original binding is invalidated. The use of the old pointer will not be linked to any memory location, it will prevent the problem of using the failed pointer to access new data. Our mechanism can be realized by modifying the dynamic memory allocation library. Executable code owners can benefit from the solution without needing to have access to the source code of vulnerable programs. A prototype of the proposed mechanism has been implemented and tested using known security attacks. Our experiment shows that the proposed mechanism can effectively defend against those types of attacks.
參考文獻
延伸閱讀
- Wang, S. Y. (2009). 運用記憶體保護機制增進資料監控點檢查之效能 [master's thesis, National Chiao Tung University]. Airiti Library. https://doi.org/10.6842/NCTU.2009.00670
- 三聯技術董事長（1992）。記憶卡及模組自動檢測器。三聯技術，(31)，76-77。https://doi.org/10.30159/SLT.199211.0007
- Yao, L. J. (2006). 物件導向系統之有效率的動態記憶體配置器 [master's thesis, Tatung University]. Airiti Library. https://www.airitilibrary.com/Article/Detail?DocID=U0081-0607200917240667
- 林聿璿（2009）。A Security Policy Complied Data Access Monitoring System〔碩士論文，國立臺北科技大學〕。華藝線上圖書館。https://doi.org/10.6841/NTUT.2009.00336
- 賀立維（1991）。Information Security。資訊縮影管理，(18&19)，54-56。https://www.airitilibrary.com/Article/Detail?DocID=a0000488-199012-x-18&19-54-56-a