程序缓冲区溢出攻击严重威胁了网络的安全性。网络攻击的攻击树建模方法是卡内基梅隆大学提出的一种以结构化、可重用的方式来描述攻击信息建模方法。本文介绍了攻击树建模方法,研究了程序缓冲区溢出攻击的攻击树,给出了程序缓冲区溢出攻击的具体的攻击树模型,并分析了其可重用性,探讨了如何结合攻击树采取措施提高网络安全性;安全分析和设计人员可借此构造更安全的信息系统。 Program buffer overflow attacks pose a serious threat to network security. The attack tree modeling approach to network attacks is a structured and reusable approach to attack information modeling proposed by Carnegie Mellon University. This paper introduces the attack tree modeling method, studies the attack tree of program buffer overflow attack, and gives the concrete attack tree model of program buffer overflow attack, and analyzes its reusability, discusses how to combine attack tree to take Measures improve cybersecurity; security analysts and designers can build safer information systems.