SCOPUS 정보 검색 플랫폼

IEEE Software

Volumn 19, Issue 1, 2002, Pages 42-51

Improving security using extensible lightweight static analysis

(2) Evans, David a Larochelle, David a

a University of Virginia (United States)

Author keywords

[No Author keywords available]

Indexed keywords

BUFFER STORAGE; C (PROGRAMMING LANGUAGE); CLIENT SERVER COMPUTER SYSTEMS; CODES (SYMBOLS); COMPUTER SIMULATION; COMPUTER SOFTWARE MAINTENANCE; COMPUTER VIRUSES; CRYPTOGRAPHY; INTERFACES (COMPUTER); INTERNET; NETWORK PROTOCOLS; SECURITY OF DATA;

AUTHENTICATION PROTOCOLS; LEGACY CODE; LIGHTWEIGHT STATIC ANALYSIS;

COMPUTER AIDED SOFTWARE ENGINEERING;

EID: 0036147522 PISSN: 07407459 EISSN: None Source Type: Journal
DOI: 10.1109/52.976940 Document Type: Article

Times cited : (355)

References (18)

1
- 51249107034
- The Mitre Corporation; (current Nov. 2001)
- (2001) Common Vulnerabilities and Exposures, Version 20010918

2
- 0002946830
- A first step towards automated detection of buffer overrun vulnerabilities
- (current Nov. 2001)
- Proc. 2000 Network and Distributed System Security Symp., Internet Society, Reston, VA., 2000
- Wagner, D.¹

3
- 0007983514
- A secure environment for untrusted helper applications: Confining the wily hacker
- (current Nov. 2001)
- Proc. Sixth Usenix Security Symp., Usenix Assoc., Berkeley, Calif., 1996
- Goldberg, I.¹

4
- 0032667877
- Flexible policy-directed code safety
- IEEE CS Press, Los Alamitos, Calif.
- (1999) IEEE Symp. Security and Privacy , pp. 32-45
- Evans, D.¹ Twyman, A.²

5
- 0007890049
- Transparent run-time defense against stack-smashing attacks
- (current Nov. 2001)
- Proc. Ninth Usenix Security Symp., Usenix Assoc., Berkeley, Calif., 2000
- Baratloo, A.¹ Singh, N.² Tsai, T.³

6
- 0007890839
- Stackguard: Automatic adaptive detection and prevention of buffer overflow attacks
- (current Nov. 2001)
- Proc. Seventh Usenix Security Symp., Usenix Assoc., Berkeley, Calif., 1998
- Cowan, C.¹

7
- 0029703698
- Static detection of dynamic memory errors
- ACM Press, New York
- (1996) SIGPLAN Conf. Programming Language Design and Implementation , pp. 44-53
- Evans, D.¹

8
- 0028510908
- The undecidability of aliasing
- (1994) ACM Trans. Programming Languages and Systems , vol.16 , Issue.5 , pp. 1467-1471
- Ramalingam, G.¹

9
- 84949505015
- ITS4: A static vulnerability scanner for C and C++ Code
- IEEE CS Press, Los Alamitos, Calif.; (current Nov. 2001)
- (2000) Proc. Ann. Computer Security Applications Conf.
- Viega, J.¹

10
- 85084164558
- Statically detecting likely buffer overflow vulnerabilities
- (current Nov. 2001)
- Proc. 10th Usenix Security Symp., Usenix Assoc., Berkeley, Calif., 2001
- Larochelle, D.¹ Evans, D.²

11
- 0007890262
- Static error checking of C applications ported from UNIX to WIN32 systems using LCLint
- senior thesis, Dept. Computer Science, University of Virginia, Charlottesville
- (2001)
- Barker, C.¹

12
- 85084161775
- FormatGuard: Automatic protection from printf format string vulnerabilities
- (current Nov. 2001)
- Proc. 10th Usenix Security Symp., Usenix Assoc., Berkeley, Calif., 2001
- Cowan, C.¹

13
- 0004207406
- O'Reilly & Associates, Sebastopol, Calif.
- (2000) Programming Perl, 3rd Edition
- Wall, L.¹ Christiansen, T.² Orwant, J.³

14
- 85084164620
- Detecting format string vulnerabilities with type qualifiers
- (current Nov. 2001)
- Proc. 10th Usenix Security Symp., Usenix Assoc., Berkeley, Calif., 2001
- Shankar, U.¹

15
- 85011293817
- LCLint: A tool for using specifications to check code
- ACM Press, New York; (current Nov. 2001)
- (1994) SIGSOFT Symp. Foundations of Software Eng.
- Evans, D.¹

16
- 0007987038
- The code analyzer LCLint
- May; (current Nov. 2001)
- (2000) Linux Journal
- Orcero, D.S.¹

17
- 0007890446
- Static checking of C programs with LCLint
- Mar.; (current Nov. 2001)
- (2000) Linux Gazette
- Pramode, C.E.¹ Gopakumar, C.E.²

18
- 0032639445
- Dynamically discovering likely program invariants to support program evolution
- IEEE CS Press, Los Alamitos, Calif.
- (1999) Proc. Int'l Conf. Software Eng. , pp. 213-224
- Ernst, M.D.¹

* 이 정보는 Elsevier사의 SCOPUS DB에서 KISTI가 분석하여 추출한 것입니다.