Testing static analysis tools using exploitable buffer overflows from open source code.

Testing static analysis tools using exploitable buffer overflows from open source code.

Five modern static analysis tools (ARCHER, BOON, Poly-Space C Verifier, Splint, and UNO) were evaluated using source code examples containing 14 exploitable buffer overflow vulnerabilities found in various versions of Sendmail, BIND, and WU-FTPD. Each code example included a "BAD" case wit...

पूर्ण विवरण

ग्रंथसूची विवरण
में प्रकाशित:Software engineering notes. 29, 6 (2004).
मुख्य लेखक: Zitser, Misha
स्वरूप: लेख
भाषा:English
विषय:
Software.
Software engineering.
Software / Program Verification.
Testing and debugging.
Computing milieux.
Computers and society.
Electronic commerce.
Measurement.
Performance.
Security.
Verification.
Buffer overflow.
Evaluation.
Exploit.
False alarm.
Source code.
Static analysis.
Test detection.