Improving computer security using extended static checking

Proceedings of the IEEE Computer Society Symposium on Research in Security and Privacy

Volumn , Issue , 2002, Pages 160-173

  Chess, Brian V ^a  

^a University of California Santa Cruz   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

AUTOMATION; C (PROGRAMMING LANGUAGE); CODES (SYMBOLS); COMPUTER PRIVACY; ERROR CORRECTION; PROGRAM DIAGNOSTICS; THEOREM PROVING;

EXTENDED STATIC CHECKING; SOURCE CODE; STATIC ANALYSIS;

SECURITY OF DATA;

EID: 0036079901     PISSN: 10637109     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (31)

1. Checking for race conditions in file accesses
2. RSAREF buffer overflow
3. Linux capabilities vulnerability
4. Formatguard: Automatic protection from printf format string vulnerabilities
5. An overview of the extended static checking system
6. Extended static checking
7. Simplify: The ESC theorem prover
8. LCLint: A tool for using specifications to check code
9. Avoiding exponential explosion: Generating compact verification conditions
10. Purify: Fast detection of memory leaks and access errors
11. Backwards-compatible bounds checking for arrays and pointers in c programs
12. A taxonomy of computer security flaws
13. Statically detecting likely buffer overflow vulnerabilities
14. Checking Java programs via guarded commands
15. Correct compilation of control structures
16. Proof-carrying code
17. Pointers are bad, records are bad, but record-pointers are good
18. File access problems in lpr/lpd
19. Libformat
20. Detecting format string vulnerabilities with type qualifiers
21. ITS4: A static vulnerability scanner for C and C++ code
22. A first step towards automated detection of buffer overrun vulnerabilities