Programming Languages White Papers
Large-Scale Analysis of Format String Vulnerabilities in Debian Linux
Overview Format-string bugs are relatively common security vulnerability, and can lead to arbitrary code execution. In collaboration with others, the paper designed and implemented a system to eliminate format string vulnerabilities from an entire Linux distribution, using type-qualifier inference, a static analysis technique that can find taint violations. They successfully analyze 66% of C/C++ source packages in the Debian 3.1 Linux distribution. The system finds 1,533 format string taint warnings. They estimate that 85% of these are true positives, i.e., real bugs; ignoring duplicates from libraries, about 75% are real bugs. They suggest that the technology exists to render format string vulnerabilities extinct in the near future.
| Publisher | Association for Computing Machinery | File Format | |
|---|---|---|---|
| Date Published | June 2007 | ||
| Format | White Papers | ||
| Topics | |||
-
Did you find this white paper useful? 11 out of 22 users found this white paper useful
White Paper RSSCitizants: Bringing IT In-House
DownloadCitizant enhances IT flexibility and scalability by creating a virtualized Dell infrastructure that will pay for itself in 18 months.
Designing High Availability for Internet Information Services
End downtime forever! - Organizations today are relying more and more on Web services for the implementation of mission-critical applications. With the advent of Service-Oriented Architectures (SOAs),which make extensive use...
Five JavaScript Frameworks: A Point-by-Point Comparison
There are a multitude of JavaScript frameworks available today for programming rich client-side interactions in web applications. With many such different options, it is important to choose a framework that...
Increase Reliability with IBM WebSphere File Transfer Edition (FTE)
"Does your organization still use FTP software? Did you know these links require 3 to 4 times more time and effort to build and maintain versus SOA-based Application Integration projects?...
Video-Centric Network Coding Strategies for 4G Wireless Networks: An Overview
The impact of Internet content and IP based television on networks is growing. Video is now ubiquitous in the home and on the street. It demands new approaches to video...
