20 search results - page 1 / 4 » Buffer overrun detection using linear programming and static... |
82
Voted
CCS
2003
ACM
15 years 4 months ago
2003
ACM
This paper addresses the issue of identifying buffer overrun vulnerabilities by statically analyzing C source code. We demonstrate a light-weight analysis based on modeling C stri...
NDSS
2000
IEEE
15 years 3 months ago
2000
IEEE
We describe a new technique for finding potential buffer overrun vulnerabilities in security-critical C code. The key to success is to use static analysis: we formulate detection...
106
click to vote
CJ
2010
14 years 9 months ago
2010
Abstract. Semantics-based program analysis uses an abstract semantics of programs/systems to statically determine run-time properties. Classic examples from compiler technology inc...
ESOP
2008
Springer
15 years 1 months ago
2008
Springer
We present a static analysis for inferring the maximum amount of buffer space used by a program consisting of concurrently running processes communicating via buffered channels. We...
103
click to vote
SIGSOFT
2004
ACM
16 years 7 days ago
2004
ACM
Five modern static analysis tools (ARCHER, BOON, PolySpace C Verifier, Splint, and UNO) were evaluated using source code examples containing 14 exploitable buffer overflow vulnera...