20 search results - page 1 / 4 » Buffer overrun detection using linear programming and static... |
CCS
2003
ACM
13 years 10 months ago
2003
ACM
This paper addresses the issue of identifying buffer overrun vulnerabilities by statically analyzing C source code. We demonstrate a light-weight analysis based on modeling C stri...
NDSS
2000
IEEE
13 years 9 months ago
2000
IEEE
We describe a new technique for finding potential buffer overrun vulnerabilities in security-critical C code. The key to success is to use static analysis: we formulate detection...
CJ
2010
13 years 2 months ago
2010
Abstract. Semantics-based program analysis uses an abstract semantics of programs/systems to statically determine run-time properties. Classic examples from compiler technology inc...
ESOP
2008
Springer
13 years 6 months ago
2008
Springer
We present a static analysis for inferring the maximum amount of buffer space used by a program consisting of concurrently running processes communicating via buffered channels. We...
SIGSOFT
2004
ACM
14 years 5 months ago
2004
ACM
Five modern static analysis tools (ARCHER, BOON, PolySpace C Verifier, Splint, and UNO) were evaluated using source code examples containing 14 exploitable buffer overflow vulnera...