Testing static analysis tools using exploitable buffer overflows from open source code.

Testing static analysis tools using exploitable buffer overflows from open source code.

Five modern static analysis tools (ARCHER, BOON, Poly-Space C Verifier, Splint, and UNO) were evaluated using source code examples containing 14 exploitable buffer overflow vulnerabilities found in various versions of Sendmail, BIND, and WU-FTPD. Each code example included a "BAD" case wit...

Disgrifiad llawn

Manylion Llyfryddiaeth
Cyhoeddwyd yn:Software engineering notes. 29, 6 (2004).
Prif Awdur: Zitser, Misha
Fformat: Erthygl
Iaith:English
Pynciau:
Software.
Software engineering.
Software / Program Verification.
Testing and debugging.
Computing milieux.
Computers and society.
Electronic commerce.
Measurement.
Performance.
Security.
Verification.
Buffer overflow.
Evaluation.
Exploit.
False alarm.
Source code.
Static analysis.
Test detection.