NDSS
2000
IEEE
14 years 1 months ago
2000
IEEE
We describe a new technique for finding potential buffer overrun vulnerabilities in security-critical C code. The key to success is to use static analysis: we formulate detection...
CCS
2003
ACM
14 years 2 months ago
2003
ACM
This paper addresses the issue of identifying buffer overrun vulnerabilities by statically analyzing C source code. We demonstrate a light-weight analysis based on modeling C stri...
COMPSAC
2005
IEEE
14 years 3 months ago
2005
IEEE
Buffer overrun vulnerabilities cause significant security problems, and have proven to be difficult to prevent. In this paper we present a novel approach to tackling the problem...