基于微补丁自适应优化算法的缓冲区溢出变种漏洞修复
作者:
作者单位:

作者简介:

通讯作者:

中图分类号:

基金项目:

贵州电网有限责任公司科技项目 (GZKJXM20232439)


Buffer Overflow Variant Vulnerabilities Repair Based on Micro-patch Adaptive Optimization Algorithm
Author:
Affiliation:

Fund Project:

  • 摘要
  • |
  • 图/表
  • |
  • 访问统计
  • |
  • 参考文献
  • |
  • 相似文献
  • |
  • 引证文献
  • |
  • 资源附件
  • |
  • 文章评论
    摘要:

    针对传统缓冲区溢出漏洞修复方法依赖固定模板、难以应对复杂变种及运行态差异的问题, 本研究提出基于微补丁自适应优化算法AOMP (micro-patch adaptive optimization algorithm)的自动化修复框架, 通过对漏洞上下文特征进行结构化建模, 并利用Q-learning算法在预定义补丁原语库中进行策略优化, 实现了针对不同漏洞状态的最优微补丁自动生成. 利用多层数据集开展实验, 结果表明AOMP在基础溢出样本上的修复成功率达98.2%, 复杂变种漏洞成功率为93.3%, 在真实漏洞场景中实现了100%的防御效果. 同时, 平均性能开销仅为4.8%, 比传统工具TuxFix降低55%, 验证了该框架可根据漏洞特征动态调整补丁结构, 实现对未知变种的自适应修复, 从而为确保系统安全提供技术支撑.

    Abstract:

    To address the problems of traditional buffer overflow vulnerability repair methods, such as reliance on fixed templates and difficulty in handling complex variants and runtime discrepancies, this study proposes an automated repair framework based on the micro-patch adaptive optimization algorithm (AOMP). By conducting structural modeling on the contextual features of vulnerabilities and applying the Q-learning algorithm to optimize strategies within a predefined patch-primitive library, the framework automatically generates optimal micro-patches for different vulnerability states. Experiments conducted on multi-layer datasets show that AOMP achieves a repair success rate of 98.2% on basic overflow samples and 93.3% on complex variant vulnerabilities, with 100% defense effectiveness achieved in real-world vulnerability scenarios. Meanwhile, the average performance overhead is only 4.8%, which is 55% lower than that of the traditional tool TuxFix. The results verify that the proposed framework can dynamically adjust patch structures according to vulnerability characteristics, enabling adaptive repair of unknown variants and providing technical support for system security.

    参考文献
    相似文献
    引证文献
引用本文

周泽元,严彬元,付鋆,陶佳冶,姜再能,周琳妍.基于微补丁自适应优化算法的缓冲区溢出变种漏洞修复.计算机系统应用,2026,35(6):249-257

复制
分享
相关视频

文章指标
  • 点击次数:
  • 下载次数:
  • HTML阅读次数:
  • 引用次数:
历史
  • 收稿日期:2025-11-03
  • 最后修改日期:2025-12-02
  • 录用日期:
  • 在线发布日期: 2026-04-30
  • 出版日期:
文章二维码
您是第位访问者
版权所有:中国科学院软件研究所 京ICP备05046678号-3
地址:北京市海淀区中关村南四街4号,邮政编码:100190
电话:010-62661041 传真: Email:csa@iscas.ac.cn
技术支持:北京勤云科技发展有限公司

京公网安备 11040202500063号