Efficient Dynamic Tracking Technique for Detecting Integer-Overflow-to-Buffer-Overflow Vulnerability-Reference-Cited by-同舟云学术

Efficient Dynamic Tracking Technique for Detecting Integer-Overflow-to-Buffer-Overflow Vulnerability

Published:2015-04-14 Issue: Volume: Page:
ISSN:
Container-title:Proceedings of the 10th ACM Symposium on Information, Computer and Communications Security
language:
Short-container-title:

Author:

Sun Hao¹,Zhang Xiangyu²,Su Chao¹,Zeng Qingkai¹

Affiliation:

1. Nanjing University, Nanjing, China

2. Purdue University, West Lafayette, IN, USA

Funder

National Natural Science Foundation of China

National Key Technology R&D Program of China

National High Technology Research and Development Program of China

Publisher

ACM

Link

https://dl.acm.org/doi/pdf/10.1145/2714576.2714605

Reference41 articles.

1. CWE-680: Io2bo vulnerabilities. http://cwe.mitre.org/data/definitions/680.html. CWE-680: Io2bo vulnerabilities. http://cwe.mitre.org/data/definitions/680.html.

2. GCC the GNU Compiler Collection. https://gcc.gnu.org/. GCC the GNU Compiler Collection. https://gcc.gnu.org/.

3. Overflow-inducing input for CVE-2005-0199. https://bugs.gentoo.org/show_bug.cgi?id=79705. Overflow-inducing input for CVE-2005-0199. https://bugs.gentoo.org/show_bug.cgi?id=79705.

4. Overflow-inducing input for CVE-2005-1141. http://www.overflow.pl/adv/gocr.txt. Overflow-inducing input for CVE-2005-1141. http://www.overflow.pl/adv/gocr.txt.

5. Overflow-inducing input for CVE-2006-4812. http://www.exploit-db.com/exploits/28760/. Overflow-inducing input for CVE-2006-4812. http://www.exploit-db.com/exploits/28760/.

Cited by 11 articles. 订阅此论文施引文献订阅此论文施引文献，注册后可以免费订阅5篇论文的施引文献，订阅后可以查看论文全部施引文献

1. IntTracer: Sanitization-aware IO2BO Vulnerability Detection across Codebases;Proceedings of the 2024 IEEE/ACM 46th International Conference on Software Engineering: Companion Proceedings;2024-04-14

2. Vulnerability detection in Java source code using a quantum convolutional neural network with self-attentive pooling, deep sequence, and graph-based hybrid feature extraction;Scientific Reports;2024-03-28

3. WASMDYPA: Effectively Detecting WebAssembly Bugs via Dynamic Program Analysis;2024 IEEE International Conference on Software Analysis, Evolution and Reengineering (SANER);2024-03-12

4. Runtime Recovery for Integer Overflows;2022 6th International Conference on System Reliability and Safety (ICSRS);2022-11-23

5. Integer Overflow Detection with Delayed Runtime Test;The 16th International Conference on Availability, Reliability and Security;2021-08-17