Refining buffer overflow detection via demand-driven path-sensitive analysis

ACM SIGPLAN/SIGSOFT Workshop on Program Analysis for Software Tools and Engineering

Volumn , Issue , 2007, Pages 63-68

  Le, Wei ^a   Soffa, Mary Lou ^a  

^a University of Virginia   (United States)

Author keywords

Demand driven; Infeasible paths; Path sensitive

Indexed keywords

COMPUTER SOFTWARE; PROGRAM DEBUGGING; SENSITIVITY ANALYSIS; STATIC ANALYSIS;

INFEASIBLE PATHS; STATIC TOOLS;

BUFFER STORAGE;

EID: 36549034271     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1251535.1251546     Document Type: Conference Paper

References (25)

1. T. Ball and J. R. Larus. Programs follow paths. Microsoft Technical Report MSR-TR-99-01, 1999.
2. R. Bodik, R. Gupta, and M. L. Soffa. Interprocedural conditional branch elimination. In Proceedings of the ACM SIGPLAN 1997 conference on Programming language design and implementation, 1997.
3. R. Bodik, R. Gupta, and M. L. Soffa. Refining data flow information using infeasible paths. In Proceedings of the 5th ACM SIGSOFT international symposium on Foundations of software engineering, .1997.
4. W. R. Bush, J. D. Pincus, and D. J. Sielaff. A static analyzer for finding dynamic programming errors. Software: Practice and Experience, 2000.
5. CERT. http://www.cart.org.
6. H. Chen and D. Wagner. Mops: an infrastructure for examining security properties of software. In Proceedings of the 9th ACM conference on Computer and communications security, 2002.
7. S. Chen, J. Xu, E. Sezer, P. Gauriar, and R. Iyer. Non-control-data attacks are realistic threats. In Proceedings of the 14th USENIX Security Symposium, 2005.
8. M. Das, S. Lerner, and M. Seigle. ESP: path-sensitive program verification in polynomial time. In Proceedings of the ACM SIGPLAN 2002 conference on Programming language design and implementation, 2002.
9. E. Duesterwald, R. Gupta, and M. L. Soffa. A demand-driven analyzer for data flow testing at the integration level. In Proceedings of the 18th international conference on Software engineering, 1996.
10. E. Duesterwald, R. Gupta, and M. L. Soffa. A practical framework for demand-driven interprocedural data flow analysis. ACM Transactions on Programming Languages and Systems, 1997.
11. D. Evans. Static detection of dynamic memory errors. In Proceedings of the ACM SIGPLAN 1996 conference on Programming language design and implementation, 1996.
12. Fortify. http://www.fortifysoftware.com.
13. B. Hackett, M. Das, D. Wang, and Z. Yang. Modular checking for buffer overflows in the large. In Proceedings of the 28th international conference on Software engineering, 2006.
14. M. J. Harrold and M. L. Soffa. Efficient computation of interprocedural definition-use chains. ACM Transactions on Programming Languages and Systems, 1994.
15. S. Lu, Z. Li, F. Qin, L. Tan, P. Zhou, and Y. Zhou. Bugbench: Benchmarks for evaluating bug detection tools. In Proceedings of Workshop on the Evaluation of Software Defect Detection Tools, 2005.
16. R. Manevich, M. Sridharan, S. Adams, M. Das, and Z. Yang. PSE: explaining program failures via postmortem static analysis. In Proceedings of the 12th ACM SIGSOFT international symposium on Foundations of software engineering, 2004.
17. Microsoft. Phoenix: A software optimization and analysis framework. http://research.microsoft.com/phoenix/.
18. Microsoft. Prefast. http://www.microsoft.com/whdc/devtools/tools/prefast. mspx.
19. A. One. Smashing the stack for fun and profit. http://www.phrack.org/ archives/49/P49-14.
20. M. Orlovich and R. Rugina. Memory leak analysis by contradiction. In Proceedings of the 13th International Static Analysis Symposium, 2006.
21. SecuriTeam. http://www.securiteam.com/.
22. D. Wagner, J. S. Foster, E. A. Brewer, and A. Aiken. A first step towards automated detection of buffer overrun vulnerabilities. In Proceedings of Network and Distributed System Security Symposium, 2000.
23. R. Wojtczuk. The advanced return-into-lib(c) exploits. http: //www.phrack.org, 2001.
24. Y. Xie, A. Chou, and D. Engler. ARCHER: Using symbolic, path-sensitive analysis to detect memory access errors. In Proceedings of the 11th ACM SIGSOFT international symposium on Foundations of software engineering, 2003.
25. M. Zitser, R. Lippmann, and T. Leek. Testing static analysis tools using exploitable buffer overflows from, open source code. In Proceedings of the 12th ACM SIGSOFT international symposium on Foundations of software engineering, 2004.