Testing static analysis tools using exploitable buffer overflows from open source code.

Testing static analysis tools using exploitable buffer overflows from open source code.

Five modern static analysis tools (ARCHER, BOON, Poly-Space C Verifier, Splint, and UNO) were evaluated using source code examples containing 14 exploitable buffer overflow vulnerabilities found in various versions of Sendmail, BIND, and WU-FTPD. Each code example included a "BAD" case wit...

ver descrição completa

Detalhes bibliográficos
Publicado no:Software engineering notes. 29, 6 (2004).
Autor principal: Zitser, Misha
Formato: Artigo
Idioma:English
Assuntos:
Software.
Software engineering.
Software / Program Verification.
Testing and debugging.
Computing milieux.
Computers and society.
Electronic commerce.
Measurement.
Performance.
Security.
Verification.
Buffer overflow.
Evaluation.
Exploit.
False alarm.
Source code.
Static analysis.
Test detection.