一种基于动态污点分析的Cisco IOS漏洞攻击检测方法

发布时间：2018-05-12 04:01

本文选题：Cisco + IOS　；参考：《小型微型计算机系统》2014年08期

【摘要】：路由器作为网间互联的核心设备,其主要功能为存储转发数据包.目前互联网中超过半数的路由交换设备来自Cisco公司,对Cisco IOS的漏洞攻击给网络安全造成了严重影响.为此提出了一种基于动态污点分析的漏洞攻击检测方法.给出了污点传播规则的形式化描述;分析了常见的4类漏洞攻击的实质,提出了基于污点分析的攻击检测规则.设计并实现了Cisco IOS漏洞攻击检测系统CTaintDetect,测试结果表明,检测系统成功检测出3个已公开利用代码的漏洞攻击,验证了检测方法的有效性.
[Abstract]:Router as the core device of interconnection between networks, its main function is to store and forward data packets. At present, more than half of the routing devices in the Internet come from Cisco Company. The vulnerability attack on Cisco IOS has a serious impact on network security. A vulnerability detection method based on dynamic stain analysis is proposed. The formal description of stain propagation rules is given, and the essence of four kinds of vulnerability attacks is analyzed, and an attack detection rule based on stain analysis is proposed. The Cisco IOS vulnerability detection system is designed and implemented. The test results show that the detection system successfully detects three vulnerabilities that have been publicly exploited, and verifies the effectiveness of the detection method.
【作者单位】：解放军信息工程大学;数学工程与先进计算国家重点实验室;
【基金】：国家科技支撑计划项目(2012BAH43B00)资助郑州市科技创新团队项目(10CXTD150)资助
【分类号】：TP393.08

【相似文献】