Efficient Dynamic Tracking Technique for Detecting Integer-Overflow-to-Buffer-Overflow Vulnerability-Reference-Cited by-同舟云学术

Efficient Dynamic Tracking Technique for Detecting Integer-Overflow-to-Buffer-Overflow Vulnerability

Published:2015-04-14 Issue: Volume: Page:
ISSN:
Container-title:Proceedings of the 10th ACM Symposium on Information, Computer and Communications Security
language:
Short-container-title:

Author:

Sun Hao¹,Zhang Xiangyu²,Su Chao¹,Zeng Qingkai¹

Affiliation:

1. Nanjing University, Nanjing, China

2. Purdue University, West Lafayette, IN, USA

Funder

National Natural Science Foundation of China

National Key Technology R&D Program of China

National High Technology Research and Development Program of China

Publisher

ACM

Link

https://dl.acm.org/doi/pdf/10.1145/2714576.2714605

Reference41 articles.

1. CWE-680: Io2bo vulnerabilities. http://cwe.mitre.org/data/definitions/680.html. CWE-680: Io2bo vulnerabilities. http://cwe.mitre.org/data/definitions/680.html.

2. GCC the GNU Compiler Collection. https://gcc.gnu.org/. GCC the GNU Compiler Collection. https://gcc.gnu.org/.

3. Overflow-inducing input for CVE-2005-0199. https://bugs.gentoo.org/show_bug.cgi?id=79705. Overflow-inducing input for CVE-2005-0199. https://bugs.gentoo.org/show_bug.cgi?id=79705.

4. Overflow-inducing input for CVE-2005-1141. http://www.overflow.pl/adv/gocr.txt. Overflow-inducing input for CVE-2005-1141. http://www.overflow.pl/adv/gocr.txt.

5. Overflow-inducing input for CVE-2006-4812. http://www.exploit-db.com/exploits/28760/. Overflow-inducing input for CVE-2006-4812. http://www.exploit-db.com/exploits/28760/.

Cited by 8 articles. 订阅此论文施引文献订阅此论文施引文献，注册后可以免费订阅5篇论文的施引文献，订阅后可以查看论文全部施引文献

1. Runtime Recovery for Integer Overflows;2022 6th International Conference on System Reliability and Safety (ICSRS);2022-11-23

2. Integer Overflow Detection with Delayed Runtime Test;The 16th International Conference on Availability, Reliability and Security;2021-08-17

3. Static Detection of File Access Control Vulnerabilities on Windows System;Concurrency and Computation: Practice and Experience;2020-09-22

4. File Guard: automatic format-based media file sanitization;International Journal of Information Security;2019-06-06

5. A Light-Weight and Accurate Method of Static Integer-Overflow-to-Buffer-Overflow Vulnerability Detection;Information Security and Cryptology;2019