ridm@nrct.go.th   ระบบคลังข้อมูลงานวิจัยไทย   รายการโปรดที่คุณเลือกไว้

Detection of buffer overflow vulnerabilities in C/C++ with pattern based limited symbolic evaluation

หน่วยงาน Nanyang Technological University, Singapore

รายละเอียด

ชื่อเรื่อง : Detection of buffer overflow vulnerabilities in C/C++ with pattern based limited symbolic evaluation
นักวิจัย : Ding, Sun , Tan, Hee Beng Kuan , Liu, Kaiping , Chandramohan, Mahinthan , Zhang, Hongyu
คำค้น : DRNTU::Engineering::Electrical and electronic engineering.
หน่วยงาน : Nanyang Technological University, Singapore
ผู้ร่วมงาน : -
ปีพิมพ์ : 2555
อ้างอิง : http://hdl.handle.net/10220/13011 , http://dx.doi.org/10.1109/COMPSACW.2012.103
ที่มา : -
ความเชี่ยวชาญ : -
ความสัมพันธ์ : -
ขอบเขตของเนื้อหา : -
บทคัดย่อ/คำอธิบาย :

Buffer overflow vulnerability is one of the major security threats for applications written in C/C++. Among the existing approaches for detecting buffer overflow vulnerability, though flow sensitive based approaches offer higher precision but they are limited by heavy overhead and the fact that many constraints are unsolvable. We propose a novel method to efficiently detect vulnerable buffer overflows in any given control flow graph through recognizing two patterns. The proposed approach first uses syntax analysis to filter away those branches that cannot possibly comply with any of the two patterns before applying a limited symbolic evaluation for a precise matching against the patterns. The proposed approach only needs to evaluate a limited set of selected branch predicates according to the patterns and avoids the need to deal with a large number of general branch predicates. This significantly improves the scalability while not sacrificing the detection precision. Our experiments demonstrate the scalability and efficiency of the proposed method, which demonstrates its applicability.

บรรณานุกรม :
Ding, Sun , Tan, Hee Beng Kuan , Liu, Kaiping , Chandramohan, Mahinthan , Zhang, Hongyu . (2555). Detection of buffer overflow vulnerabilities in C/C++ with pattern based limited symbolic evaluation.
    กรุงเทพมหานคร : Nanyang Technological University, Singapore.
Ding, Sun , Tan, Hee Beng Kuan , Liu, Kaiping , Chandramohan, Mahinthan , Zhang, Hongyu . 2555. "Detection of buffer overflow vulnerabilities in C/C++ with pattern based limited symbolic evaluation".
    กรุงเทพมหานคร : Nanyang Technological University, Singapore.
Ding, Sun , Tan, Hee Beng Kuan , Liu, Kaiping , Chandramohan, Mahinthan , Zhang, Hongyu . "Detection of buffer overflow vulnerabilities in C/C++ with pattern based limited symbolic evaluation."
    กรุงเทพมหานคร : Nanyang Technological University, Singapore, 2555. Print.
Ding, Sun , Tan, Hee Beng Kuan , Liu, Kaiping , Chandramohan, Mahinthan , Zhang, Hongyu . Detection of buffer overflow vulnerabilities in C/C++ with pattern based limited symbolic evaluation. กรุงเทพมหานคร : Nanyang Technological University, Singapore; 2555.