Integrating static and dynamic analysis for detecting vulnerabilities

Proceedings - International Computer Software and Applications Conference

Volumn 1, Issue , 2006, Pages 343-350

  Aggarwal, Ashish ^a   Jalote, Pankaj ^a  

^a INDIAN INSTITUTE OF TECHNOLOGY KANPUR   (India)

Author keywords

[No Author keywords available]

Indexed keywords

BUFFER STORAGE; COMPUTER SOFTWARE; ERROR ANALYSIS; REAL TIME SYSTEMS; RISK ASSESSMENT;

BUFFER OVERFLOW VULNERABILITY; INTEGER ERRORS; SECURITY BUGS; SOURCE CODE;

SECURITY OF DATA;

EID: 34247507725     PISSN: 07303157     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/COMPSAC.2006.55     Document Type: Conference Paper

References (11)

1. David Larochelle and David Evans. Statically Detecting Likely Buffer Overflow Vulnerabilities. In Proceedings of the 10th USENIX Security Symposium, pages 177190, Washington, District of Columbia, U.S.A., August 2001. USENIX Association.
2. William Bush, Jonathan Pincus, and David Sielaff. A static analyzer for finding dynamic programming errors. Software: Practice and Experience, 30(7):775802, June 2000. ISSN: 0038-0644.
3. Reed Hastings and Bob Joyce. Purify: Fast Detection of Memory Leaks and Access Errors. In Proceedings of the Winter 92 USENIX conference, pages 125136, San Francisco, California, U.S.A., January 1992. USENIX Association.
4. James R. Larus, Thomas Ball, Manuvir Das, Robert DeLine, Manuel Fahndrich, Jon Pincus, Sriram K. Rajamani, and Ramanathan Venkatapathy. Righting Software. IEEE Software, 21(3):92100, May-June 2004.
5. David Wagner, Jeffrey S. Foster, Eric A. Brewer, and Alexander Aiken. A First Step Towards Automated Detection of Buffer Overrun Vulnerabilities. In Proceedings of the 7th Networking and Distributed System Security Symposium 2000, pages 317, San Diego, California, U.S.A., February 2000.
6. John Viega, J.T. Bloch, Tadayoshi Kohno, and Gary McGraw. ITS4: A Static Vulnerability Scanner for C and C++ Code. In 16th Annual Computer Security Applications Conference, New Orleans, Louisiana, U.S.A., December 2000.
7. Eric Haugh and Matt Bishop. Testing C Programs for Buffer Overflow Vulnerabilities. In Proceedings of the 10th Network and Distributed System Security Symposium (NDSS03), San Diego, California, U.S.A., February 2003. Internet Society.
8. Reed Hastings and Bob Joyce. Purify: Fast Detection of Memory Leaks and Access Errors. In Proceedings of the Winter 92 USENIX conference, pages 125136, San Francisco, California, U.S.A., January 1992. USENIX Association.
9. Anup K. Ghosh, Tom OConnor, and Garry McGraw. An Automated Approach for Identifying Potential Vulnerabilities in Software. In Proceedings of the IEEE Symposium on Security and Privacy, pages 104114, Oakland, California, U.S.A., May 1998. IEEE Computer Society, IEEE Press.
10. Yves Younan, Wouter Joosen, Frank Piessens. Code Injection in C and C++ : A Survey of Vulnerabilities and Countermeasures, Report CW386, July 2004, Department of Computer Science, K.U.Leuven
11. William Landi, Barbara G. Ryder. A Safe Approximate Algorithm for Interprocedural Pointer Aliasing, Department of Computer Science, Rutgers University, New Brunswick, NJ