Verifying the safety of user pointer dereferences

Proceedings - IEEE Symposium on Security and Privacy

Volumn , Issue , 2008, Pages 325-338

  Bugrara, Suhabe ^a   Aiken, Alex ^a  

^a Stanford University   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ALARM SYSTEMS; COMPUTER SOFTWARE; DATA STORAGE EQUIPMENT; ENERGY MANAGEMENT; STATIC ANALYSIS;

FALSE ALARMS; KERNEL SPACES; LINES OF CODE; LINUX - OPERATING SYSTEM; OPERATING SYSTEMS; SECURITY AND PRIVACY; SENSITIVE DATA; SYSTEM CALLS; VIRTUAL MEMORY;

COMPUTER OPERATING SYSTEMS;

EID: 50249085485     PISSN: 10816011     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SP.2008.15     Document Type: Conference Paper

References (16)

1. A. Aiken, S. Bugrara, I. Dillig, T. Dillig, B. Hackett, and P. Hawkins. An Overview of the Saturn Project. In Proceeding of the 7th ACM Workshop on Program Analysis for Software Tools and Engineering, New York, NY, USA, 2007. ACM Press.
2. T. Ball and S. K. Rajamani. The SLAM Project: Debugging System Software via Static Analysis. In Proceedings of the 29th ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages, pages 1-3, New York, NY, USA, 2002. ACM Press.
3. B. Blanchet, P. Cousot, R. Cousot, J. Feret, L. Mauborgne, A. Mine, D. Monniaux, and X. Rival. Design and Implementation of a Special-Purpose Static Program Analyzer for Safety-Critical Real-Time Embedded Software. pages 85-108, 2002.
4. M. Das, S. Lerner, and M. Seigle. ESP: Path-sensitive Program Verification in Polynomial Time. In Proceedings of the ACM SIGPLAN 2002 Conference on Programming Language Design and Implementation, pages 57-68, New York, NY, USA, 2002. ACM Press.
5. I. Dillig, T. Dillig, and A. Aiken. Static Error Detection Using Semantic Inconsistency Inference. In Proceedings of the ACM SIGPLAN 2007 Conference on Programming Language Design and Implementation, volume 42, pages 435-445, New York, NY, USA, 2007. ACM Press.
6. N. Dor, S. Adams, M. Das, and Z. Yang. Software Validation via Scalable Path-sensitive Value Flow Analysis. In Proceedings of the ACM SIGSOFT 2004 International Symposium on Software Testing and Analysis, pages 12-22, New York, NY, USA, 2004. ACM Press.
7. S. Fink, E. Yahav, N. Dor, G. Ramalingam, and E. Geay. Effective Typestate Verification in the Presence of Aliasing. In Proceedings of the 2006 International Symposium on Software Testing and Analysis, pages 133-144, New York, NY, USA, 2006. ACM Press.
8. J. Foster, M. Fahndrich, and A. Aiken. A Theory of Type Qualifiers. In Proceedings of the ACM SIGPLAN 1999 Conference on Programming Language Design and Implementation, pages 192-203, New York, NY, USA, 1999. ACM Press.
9. B. Hackett and A. Aiken. How is Aliasing Used in Systems Software? In Proceedings of the 14th ACM SIGSOFT International Symposium on Foundations of Software Engineering, pages 69-80, New York, NY, USA, 2006. ACM Press.
10. S. Hallem, B. Chelf, Y. Xie, and D. Engler. A System and Language for Building System-Specific, Static Analyses. In Proceedings of the ACM SIGPLAN 2002 Conference on Programming Language Design and Implementation, pages 69-82, New York, NY, USA, 2002. ACM Press.
11. T. Henzinger, R. Jhala, R. Majumdar, and G. Sutre. Lazy Abstraction. In Proceedings of the 29th ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages, pages 58-70, New York, NY, USA, 2002. ACM Press.
12. R. Johnson and D. Wagner. Finding User/Kernel Pointer Bugs with Type Inference. In Proceedings of the 13th USENIX Security Symposium, pages 119-134, 2004.
13. R. E. Strom and S. Yemini. Typestate: A Programming Language Concept for Enhancing Software Reliability. volume 12, pages 157-171, Piscataway, NJ, USA, 1986. IEEE Press.
14. L. Torvalds. Sparse.
15. Y. Xie and A. Aiken. Scalable Error Detection using Boolean Satisfiability. In Proceedings of the 32nd ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages, pages 351-363, New York, NY, USA, 2005. ACM Press.
16. J. Yang, T. Kremenek, Y. Xie, and D. Engler. MECA: An Extensible, Expressive System and Language for Statically Checking Security Properties. In Proceedings of the 10th ACM Conference on Computer and Communications Security, pages 321-334, New York, NY, USA, 2003. ACM Press.