Improving Software Security with a C Pointer Analysis (2005)
| Venue: | In ICSE ’05: Proceedings of the 27th International Conference on Software Engineering |
| Citations: | 27 - 7 self |
BibTeX
@INPROCEEDINGS{Avots05improvingsoftware,
author = {Dzintars Avots and Michael Dalton and V. Benjamin Livshits and Monica S. Lam and V. Benjamin and Livshits Monica and S. Lam},
title = {Improving Software Security with a C Pointer Analysis},
booktitle = {In ICSE ’05: Proceedings of the 27th International Conference on Software Engineering},
year = {2005},
pages = {332--341},
publisher = {ACM Press}
}
Years of Citing Articles
Bookmark
 |
 |
 |
 |
 |
 |
OpenURL
Abstract
This paper presents a context-sensitive, inclusion-based, field-sensitive points-to analysis for C and uses the analysis to detect and prevent security vulnerabilities in programs. In addition to a conservative analysis, we propose an optimistic analysis that assumes a more restricted C semantics that reflects common C usage to increase the precision of the analysis.
