버퍼 오버플로우 공격 방지를 위한 취약 함수 변환기 구현 = Implementation of a function translator converting vulnerable functions for preventing buffer overflow attacks

다국어 초록 (Multilingual Abstract)

C language is frequently used to develop application and system programs. However,programs using C language are vulnerable to buffer overflow attacks. To prevent buffer overflow, programmers have to check boundaries of buffer areas when they develop programs. But vulnerable programs frequently result from improper programming habits and mistakes of programmers. Existing researches for preventing buffer overflow attacks only inform programmers of warnings about vulnerabilities and not remove vulnerabilities in advance so that the programs still include vulnerabilities. In this paper,we propose a function translator which prevents creating programs including buffer overflow vulnerabilities. To prevent creating binary from source including vulnerabilities,the proposed translator searches vulnerable functions which cause buffer overflows, and converts them into secure functions. Accordingly, developing vulnerable programs by programmers which lack in knowledge on security can be prevented.

참고문헌 (Reference)

1 김익수, "관리자 인증 강화를 위한 추가적인 패스워드를 가지는 보안커널모듈 설계 및 구현" 한국정보처리학회 10 (10): 675-682, 2003

2 "http://www.polyspace.com/"

3 "http://www.coverity.com/"

4 Kurt Wall, "The GCC Book" APress 2003

5 E. Gaugh, "Testing C Programs for Buffer Overflow Vulnerabilities" 2003

6 C. Cowan, "StackGuard:Automatic Adaptive Detection and Prevention of Buffer-Overflow Attacks" 1998

7 R. Seacord, "Secure Coding in C and C++" Addison Wesley 2005

8 J. Viega, "ITS4:A static vulnerability scanner for c and c++ code" 2000

9 J. Pincus, "Beyond stack smashing: Recent advances in exploiting buffer overruns" 2 (2): 20-27, 2004

10 Y. Xie, "ARCHER:Using Symbolic,Path-sensitive Analysis to Detect Memory Acess Errors" 2003

11 D. Wagner, "A First Step towards Automated Detection of Buffer Overrun Vulnerabilities" 2000