随着人们对于计算机能力的追求提高, 软件系统的复杂度不断上升, 随之引发的大量软件安全漏洞对个人、机构、社会乃至国家的安全造成严重威胁。主流计算机系统普遍采用多层次软件架构，通过层次划分来缩短软件开发周期。层次间的透明性使各层在开发过程中缺乏安全协同，尽管每层所部署的防利用机制能抑制层次内的漏洞攻击，但跨层次的漏洞利用已成为了攻击者绕过当前防御机制的重要途径。本项目针对多层次软件架构，探索漏洞感知和防利用技术。构建跨软件层次的漏洞表征模型，进行防利用机制的缺陷机理分析和正反馈递增式的漏洞危害感知，探索先验的高强度的防利用手段，从全软件栈角度，构造层次间协同的防利用体系。我们将在跨软件层次的漏洞表征模型及机理分析、确定性的漏洞感知、正反馈递增式的漏洞融合攻击及能力评估、先验高强度低开销的防利用手段、全栈式纵横向相结合的漏洞防利用体系等五个方面进行创新，全方位地保障系统的安全性。

As computer performance improves and software system complexity keeps increasing, a large amount of software vulnerabilities appear and bring critical threat to personal, social and even national security. In software development life cycle, multi-layer architecture is widely used. While transparency between each layer improves efficiency, it decreases security collaboration between layers. Therefore, security mechanisms on each layer merely defence against attack inside a certain layer, making it hard to protect computer from multi-layered attack, which has become a common approach for attackers to bypass security defence. This project aims at exploring security technology of vulnerability perception and defence on multi-layer software architecture. By constructing multi-layered vulnerability model, analysing deficiency of current defence mechanism, perceiving feedback from vulnerabilities, and exploring enhanced defence method based on proactive knowledge, we try to construct full-stack layer-collaborated defence architecture. In this project, we plan to introduce innovation from the following aspects: analysis on multi-layered vulnerability model, perception of vulnerabilities, evaluation of vulnerabilities ability from combined feedback information, proactive-knowledge based enhanced defence method, and full-stack layer-collaborated defence architecture, to guarantee comprehensive system security.