本文简要介绍了缓存区溢出产生原因及利用其进行攻击的原理,并结合在Windows 2000 系统下进行的缓存区溢出攻击实验深入分析了其中的关键技术,着重介绍了shellcode 的编写。最后给出了应对缓存区溢出攻击的防范策略。 关键词:缓存区溢出;堆栈;shellcode;管道 Abstract: This paper simply introduces the reason of buffer overflow and the principle of attacks using it, with the buffer overflow attack experiment under Windows 2000,the authors analyze deeply key techniques among them, mainly on the writing of shellcode. At last, they bring out the corresponding defense strategies. Key words: buffer overflow; stack; shellcode;pipe