WebWe have implemented a prototype system ELAID based on LLVM, and evaluated it on 228 programs of the NIST’s SAMATE Juliet test suite and 14 known IO2BO vulnerabilities in … WebIn this paper, we present the design and implementation of IntTracker, an efficient dynamic tracking technique for detecting IO2BO vulnerabilities in C/C++ programs. IntTracker …
Using type analysis in compiler to mitigate integer-overflow-to …
WebThe Integer-Overflow-to-Buffer-Overflow (IO2BO) vulnerability has been widely exploited by attackers to cause severe damages to computer systems. The Integer-Overflow-to-Buffer-Overflow (IO2BO) vulnerability has been widely exploited by attackers to cause severe damages to computer systems. Automatically identifying this kind of vulnerability is critical for software security. Meer weergeven Taint source represents the untrusted input of the program, which can be files, net-work data, input messages of mouse and keyboard. Generally, it is necessary to provide untrusted input source information according to … Meer weergeven Given the information of taint source, taint propagation is performed according to the algorithm shown in Algorithm 1. Since our implementation is based on LLVM IR, the algorithm … Meer weergeven After annotating taint source and taint propagation, all values influenced by taint source will be marked as tainted. We identify the … Meer weergeven The code in Fig. 7 is a snippet of LLVM IR omitting type information for the sake of readability. It first uses getelementptr instruction to get the address of variable bar of struct … Meer weergeven literary science fiction books
Table 7 A Light-Weight and Accurate Method of Static Integer …
Web1 jan. 2011 · Guest Editor's Preface Guest Editor's Preface Gritzalis, Dimitris 2011-01-01 00:00:00 Journal of Computer Security 19 (2011) 1027–1028 DOI 10.3233/JCS-2011-0441 IOS Press This Special Issue is based on original research ideas, which were initially expressed in papers published in the Proceedings of the 15th European Symposium on … Web8 sep. 2024 · A static analysis framework that first constructs an inter-procedural call graph and utilizes taint analysis to accurately identify potential IO2BO vulnerabilities, and feeds the constraints to SMT solver to decide their satisfiability. The Integer-Overflow-to-Buffer-Overflow (IO2BO) vulnerability has been widely exploited by attackers to cause severe … literary scope