Hardening attack surfaces with formally proven binary format parsers-Reference-Cited by-同舟云学术

Hardening attack surfaces with formally proven binary format parsers

Published:2022-06-09 Issue: Volume: Page:
ISSN:
Container-title:Proceedings of the 43rd ACM SIGPLAN International Conference on Programming Language Design and Implementation
language:
Short-container-title:

Author:

Swamy Nikhil¹,Ramananandro Tahina¹,Rastogi Aseem²,Spiridonova Irina¹,Ni Haobin³,Malloy Dmitry⁴,Vazquez Juan⁴,Tang Michael⁴,Cardona Omar⁴,Gupta Arti⁴

Affiliation:

1. Microsoft Research, USA

2. Microsoft Research, India

3. Cornell University, USA

4. Microsoft, USA

Publisher

ACM

Link

https://dl.acm.org/doi/pdf/10.1145/3519939.3523708

Reference28 articles.

1. Julian Bangert and Nickolai Zeldovich . 2015 . Nail: A Practical Tool for Parsing and Generating Data Formats. login Usenix Mag., 40, 1 (2015), https://www.usenix.org/publications/login/feb15/bangert Julian Bangert and Nickolai Zeldovich. 2015. Nail: A Practical Tool for Parsing and Generating Data Formats. login Usenix Mag., 40, 1 (2015), https://www.usenix.org/publications/login/feb15/bangert

2. A verified packrat parser interpreter for parsing expression grammars

3. Sergey Bratus , Lars Hermerschmidt , Sven M. Hallberg , Michael E. Locasto , Falcon Momot , Meredith L. Patterson , and Anna Shubina . 2017. Curing the Vulnerable Parser: Design Patterns for Secure Input Handling. login Usenix Mag., 42, 1 ( 2017 ), https://www.usenix.org/publications/login/spring2017/bratus Sergey Bratus, Lars Hermerschmidt, Sven M. Hallberg, Michael E. Locasto, Falcon Momot, Meredith L. Patterson, and Anna Shubina. 2017. Curing the Vulnerable Parser: Design Patterns for Secure Input Handling. login Usenix Mag., 42, 1 (2017), https://www.usenix.org/publications/login/spring2017/bratus

4. Skipping the binder bureaucracy with mixed embeddings in a semantics course (functional pearl)

5. Narcissus: correct-by-construction derivation of decoders and encoders from binary formats

Cited by 7 articles. 订阅此论文施引文献订阅此论文施引文献，注册后可以免费订阅5篇论文的施引文献，订阅后可以查看论文全部施引文献

1. Daedalus: Safer Document Parsing;Proceedings of the ACM on Programming Languages;2024-06-20

2. Comparse: Provably Secure Formats for Cryptographic Protocols;Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security;2023-11-15

3. Modularity, Code Specialization, and Zero-Cost Abstractions for Program Verification;Proceedings of the ACM on Programming Languages;2023-08-30

4. An analysis of how many undiscovered vulnerabilities remain in information systems;Computers & Security;2023-08

5. On Software Infrastructure: Develop, Prove, Profit?;IEEE Security & Privacy;2023-07