22 search results - page 1 / 5 » ITS4: A Static Vulnerability Scanner for C and C Code |
ACSAC
2000
IEEE
13 years 9 months ago
2000
IEEE
We describe ITS4, a tool for statically scanning security-critical C source code for vulnerabilities. Compared to other approaches, our scanning technique stakes out a new middle ...
VMCAI
2005
Springer
13 years 10 months ago
2005
Springer
Abstract. Implementations of cryptographic protocols, such as OpenSSL for example, contain bugs affecting security, which cannot be detected by just analyzing abstract protocols (e...
CCS
2003
ACM
13 years 10 months ago
2003
ACM
This paper addresses the issue of identifying buffer overrun vulnerabilities by statically analyzing C source code. We demonstrate a light-weight analysis based on modeling C stri...
SP
2002
IEEE
13 years 4 months ago
2002
IEEE
We describe a method for finding security flaws in source code by way of static analysis. The method is notable because it allows a user to specify a wide range of security proper...
WWW
2004
ACM
14 years 5 months ago
2004
ACM
Security remains a major roadblock to universal acceptance of the Web for many kinds of transactions, especially since the recent sharp increase in remotely exploitable vulnerabil...