Testing static analysis tools using exploitable buffer overflows from open source code.

Testing static analysis tools using exploitable buffer overflows from open source code.

Five modern static analysis tools (ARCHER, BOON, Poly-Space C Verifier, Splint, and UNO) were evaluated using source code examples containing 14 exploitable buffer overflow vulnerabilities found in various versions of Sendmail, BIND, and WU-FTPD. Each code example included a "BAD" case wit...

Cijeli opis

Bibliografski detalji
Izdano u:Software engineering notes. 29, 6 (2004).
Glavni autor: Zitser, Misha
Format: Članak
Jezik:English
Teme:
Software.
Software engineering.
Software / Program Verification.
Testing and debugging.
Computing milieux.
Computers and society.
Electronic commerce.
Measurement.
Performance.
Security.
Verification.
Buffer overflow.
Evaluation.
Exploit.
False alarm.
Source code.
Static analysis.
Test detection.