Dynamic taint propagation: Finding vulnerabilities without attacking

Information Security Technical Report

Volumn 13, Issue 1, 2008, Pages 33-39

  Chess, Brian ^a   West, Jacob ^a  

^a Fortify Software   (United States)

Author keywords

Quality assurance; Security; Software; Taint propagation; Vulnerability detection

Indexed keywords

PROGRAM DEBUGGING; QUALITY ASSURANCE; SOCIETIES AND INSTITUTIONS; USER INTERFACES;

QUALITY ASSURANCE ORGANIZATIONS; SECURITY TESTING TECHNIQUES; TAINT PROPAGATION; VULNERABILITY DETECTION;

SECURITY OF DATA;

EID: 43049160731     PISSN: 13634127     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.istr.2008.02.003     Document Type: Article

References (6)

1. Steve Christey, Robert A. Martin. Vulnerability type distributions in CVE. ; 2007.
2. Iyengar P, Karamouzis F. Offshore application testing drives greater business value; 2007.
3. Vivek Haldar, Deepak Chandra, Michael Franz. Dynamic taint propagation for java. ; 2005.
4. Eric Larson, Todd Austin. High coverage detection of input-related security faults. ; 2003.
5. Wei Xu, Sandeep Bhatkar, R. Sekar. Taint-enhanced policy enforcement: a practical approach to defeat a wide range of attacks. .
6. .