Rethinking Regex engines to address ReDoS

Abstract

Regular expressions (regexes) are a powerful string manipulation tool. Unfortunately, in programming languages like Python, Java, and JavaScript, they are unnecessarily dangerous, implemented with worst-case exponential matching behavior. This high time complexity exposes software services to regular expression denial of service (ReDoS) attacks.

BibTeX

@inproceedings{Davis:FSE19,
  author    = {James C. Davis},
  title     = {Rethinking Regex engines to address {ReDoS}},
  booktitle = {{ESEC/SIGSOFT} {FSE}},
  pages     = {1256--1258},
  publisher = {{ACM}},
  year      = {2019},
}

Rethinking Regex engines to address ReDoS

Abstract

Related papers