Practical and effective symbolic analysis for buffer overflow detection

Lian Li, Cristina Cifuentes, Nathan Keynes

Abstract

Although buffer overflow detection has been studied for more than 20 years, it is still the most common source of security vulnerabilities in systems code. Different approaches using symbolic analysis have been proposed to detect this vulnerability. However, existing symbolic analysis techniques are either too complex to scale to millions of lines of code (MLOC), or too simple to effectively handle loops and complex program structures.

BibTeX

@inproceedings{Li-al:FSE10,
  author    = {Lian Li and
               Cristina Cifuentes and
               Nathan Keynes},
  title     = {Practical and effective symbolic analysis for buffer overflow detection},
  booktitle = {FSE},
  pages     = {317--326},
  publisher = {{ACM}},
  year      = {2010},
}

Practical and effective symbolic analysis for buffer overflow detection

Abstract

Related papers