Generating vulnerability signatures for string manipulating programs using automata-based forward and backward symbolic analyses

ASE2009 - 24th IEEE/ACM International Conference on Automated Software Engineering

Volumn , Issue , 2009, Pages 605-609

  Yu, Fang ^a   Alkhalaf, Muath ^a   Bultan, Tevfik ^a  

^a University of California   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ATTACK PATTERNS; BACKWARD ANALYSIS; DETERMINISTIC FINITE AUTOMATA; IMAGE COMPUTATION; POTENTIAL ATTACK; PROGRAM POINTS; REACHABILITY ANALYSIS; REGULAR EXPRESSIONS; STRING ANALYSIS; SYMBOLIC ANALYSIS; VULNERABILITY SIGNATURE;

COMPUTER SOFTWARE; ROBOTS; TRANSLATION (LANGUAGES);

AUTOMATA THEORY;

EID: 77952112519     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ASE.2009.20     Document Type: Conference Paper

References (5)

1. D. Brumley, J. Newsome, D. Song, H. Wang, and S. Jha, "Theory and techniques for automatic generation of vulnerability-based signatures," IEEE Trans. Dependable Sec. Comput., vol. 5, no.4, pp. 224-241, 2008.
2. F. Yu, T. Bultan, M. Cova, and O. H. Ibarra, "Symbolic string verification: An automata-based approach," in Proc. of SPIN, 2008, pp. 306-324.
3. D. Brumley, H. Wang, S. Jha, and D. X. Song, "Creating vulnerability signatures using weakest preconditions," in Proc. of CSF, 2007, pp. 311-325.
4. A. Kieżun, P. J. Guo, K. Jayaraman, and M. D. Ernst, "Automatic creation of SQL injection and cross-site scripting attacks," in Proc. of ICSE, 2009.
5. F. Yu, M. Alkhalaf, and T. Bultan, "Generating vulnerability signatures for string manipulating programs using automata-based forward and backward symbolic analyses," Technical Report 2009-11, UCSB CS, 2009.