Statically detecting likely buffer overflow vulnerabilities

Proceedings of the 10th USENIX Security Symposium

Volumn , Issue , 2001, Pages

  Larochelle, David ^a   Evans, David ^a  

^a University of Virginia   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

BUFFER STORAGE; SEMANTICS;

BUFFER OVERFLOW ATTACKS; BUFFER OVERFLOWS; NEW APPROACHES; PROGRAM SOURCE CODES; SECURITY THREATS; STATIC CHECKING;

STATIC ANALYSIS;

EID: 85084164558     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (46)

1. Alexander Aiken. Introduction to Set Constraint-Based Program Analysis. Science of Computer Programming, Volume 35, Numbers 2-3. November 1999.
2. Aleph One. Smashing the Stack for Fun and Profit. BugTraq Archives. http://immunix.org/StackGuard/profit.html.
3. Mark Andrews. Personal communication, May 2001.
4. th USENIX Security Symposium, August 2000.
5. th SIGCSE Technical Symposium on Computer Science Education, February 1988.
6. Liz Coolbaugh. Buffer Overflow Protection from Kernel Patches. Linux Weekly News, http://lwn.net/1999/1230/security.php3.
7. Patrick Cousot and Radhia Cousot. Abstract Interpretation: A Unified Lattice Model for Static Analysis of Programs by Construction or Approximation of Fixpoints. Fourth ACM Symposium on Principles of Programming Languages, January 1977.
8. th USENIX Security Symposium, January 1998.
9. Crispin Cowan, Steve Beattie, Ryan Finnin Day, Calton Pu, Perry Wagle and Erik Walthinsen. Protecting Systems from Stack Smashing Attacks with StackGuard. Linux Expo. May 1999. (Updated statistics at http://immunix.org/StackGuard/performance.html)
10. Crispin Cowan, Perry Wagle, Calton Pu, Steve Beattie and Jonathan Walpole. Buffer Overflows: Attacks and Defenses for the Vulnerability of the Decade. DARPA Information Survivability Conference and Exposition. January 2000.
11. David Detlefs, K. Rustan M. Leino, Greg Nelson and James B. Saxe. Extended Static Checking. Research Report, Compaq Systems Research Center. December 18, 1998.
12. Nurit Dor, Michael Rodeh and Mooly Sagiv. Cleanness Checking of String Manipulations in C Programs via Integer Analysis. 8th International Static Analysis Symposium. To appear, July 2001.
13. Úlfar Erlingsson and Fred B. Schneider. SASI Enforcement of Security Policies: A Retrospective. New Security Paradigms Workshop. September 1999.
14. Ulfar Erlingsson and Fred B. Schneider. IRM Enforcement of Java Stack Inspection. IEEE Symposium on Security and Privacy. May 2000.
15. Michael D. Ernst, Jake Cockrell, William G. Griswold and David Notkin. Dynamically Discovering Likely Program Invariants to Support Program Evolution. International Conference on Software Engineering. May 1999.
16. David Evans, John Guttag, Jim Horning and Yang Meng Tan. LCLint: A Tool for Using Specifications to Check Code. SIGSOFT Symposium on the Foundations of Software Engineering. December 1994.
17. David Evans. Static Detection of Dynamic Memory Errors. SIGPLAN Conference on Programming Language Design and Implementation. May 1996.
18. David Evans and Andrew Twyman. Flexible Policy-Directed Code Safety. IEEE Symposium on Security and Privacy. May 1999.
19. David Evans. Policy-Directed Code Safety. MIT PhD Thesis. February 2000.
20. David Evans. Annotation-Assisted Lightweight Static Checking. First International Workshop on Automated Program Analysis, Testing and Verification. June 2000.
21. David Evans. LCLint User's Guide, Version 2.5. May 2000. http://lclint.cs.virginia.edu/guide/
22. Timothy Fraser, Lee Badger and Mark Feldman. Hardening COTS Software with Generic Software Wrappers. IEEE Symposium on Security and Privacy. May 1999.
23. th USENIX Security Symposium. July 1996.
24. John V. Guttag and James J. Horning, editors, with Stephen J. Garland, Kevin D. Jones, Andrés Modet and Jennette M. Wing. Larch: Languages and Tools for Formal Specification. Springer-Verlag. 1993.
25. th NASA Langley Formal Methods Workshop. September 1997.
26. ISO/IEC 9899 International Standard. Programming Languages - C. December 1999. Approved by ANSI May 2000.
27. David Larochelle, Yanlin Huang, Avneesh Saxena and Seejo Sebastine. Static Detection of Buffer Overflows in C using LCLint. Unpublished report available from the authors. May 2000.
28. Bob Luckin. Personal communication, April 2001.
29. Gregory A Lundberg. Personal communication, April 2001.
30. John McHugh. Towards the Generation of Efficent Code form Verified Programs. Technical Report 40, Institute for Computing Science, University of Texas at Austin PhD Thesis, 1984.
31. George C. Necula. Proof-Carrying Code. 24th ACM SIGPLAN-SIGACT Symposium on Principles of Programming Langauges, January 1997.
32. George C. Necula and Peter Lee. Safe Kernel Extensions Without Run-Time Checking. 2nd Symposium on Operating Systems Design and Implementation, October 1996.
33. David Santo Orcero. The Code Analyzer LCLint. Linux Journal. May 2000.
34. Richard D. Pethia. Bugs in Programs. Keynote address at SIGSOFT Foundations of Software Engineering. November 2000.
35. Pramode C E and Gopakumar C E. Static Checking of C programs with LCLint. Linux Gazette Issue 51. March 2000.
36. Jon Rochlis and Mark Eichin. With Microscope and Tweezers: the Worm from MIT's Perspective. Communications of the ACM. June 1989.
37. Brian Snow. Future of Security. Panel presentation at IEEE Security and Privacy. May 1999.
38. Eugene Spafford. The Internet Worm Program: An Analysis. Purdue Tech Report 832. 1988.
39. J. Stark and A. Ireland. Invariant Discovery Via Failed Proof Attempts. 8th International Workshop on Logic Based Program Synthesis and Transformation. June 1998.
40. Linus Torvalds. Message archived in Linux Weekly News. August 1998. http://lwn.net/980806/a/linus-noexec.html
41. John Viega, J.T. Bloch, Tadayoshi Kohno and Gary McGraw. ITS4: A Static Vulnerability Scanner for C and C++ Code. Annual Computer Security Applications Conference. December 2000.
42. David Wagner, Jeffrey S. Foster, Eric A. Brewer and Alexander Aiken. A First Step Towards Automated Detection of Buffer Overrun Vulnerabilities. Network and Distributed System Security Symposium. February 2000.
43. David Wagner. Static Analysis and Computer Security: New Techniques for Software Assurance. University of California, Berkeley, PhD Thesis, 2000.
44. th ACM Symposium on Operating Systems Principles, 1993.
45. Ben Wegbreit. Property Extraction in Well-Founded Property Sets. IEEE Transactions on Software Engineering, September 1975.
46. The Wall Street Journal. Researchers Find Software Flaw Giving Hackers Key to Web Sites. January 30, 2001.