Research on Comprehensive Detection of Buffer Overflow Vulnerability

Static detection tools of buffer overflow widespread have problems of high false positives and false negatives. For this, this thesis propose a comprehensive detecting program of buffer overflow vulnerabilities, which integrated different tools of static detection based on different principles to validate results each other, complement each other. To do this can effectively decline false positives and false negatives. Experimental results show that compared single detection tool, the program significantly reduces the rate of false positives and false negatives of detecting result.