Coverart for item
The Resource Value-range analysis of C programs : towards proving the absence of buffer overflow vulnerabilities, Axel Simon

Value-range analysis of C programs : towards proving the absence of buffer overflow vulnerabilities, Axel Simon

Label
Value-range analysis of C programs : towards proving the absence of buffer overflow vulnerabilities
Title
Value-range analysis of C programs
Title remainder
towards proving the absence of buffer overflow vulnerabilities
Statement of responsibility
Axel Simon
Creator
Subject
Language
eng
Summary
The use of static analysis techniques to prove the partial correctness of C code has recently attracted much attention due to the high cost of software errors - particularly with respect to security vulnerabilities. However, research into new analysis techniques is often hampered by the technical difficulties of analysing accesses through pointers, pointer arithmetic, coercion between types, integer wrap-around and other low-level behaviour. Axel Simon provides a concise, yet formal description of a value-range analysis that soundly approximates the semantics of C programs using systems of linear inequalities (polyhedra). The analysis is formally specified down to the bit-level while providing a precise approximation of all low-level aspects of C using polyhedral operations and, as such, it provides a basis for implementing new analyses that are aimed at verifying higher-level program properties precisely. One example of such an analysis is the tracking of the NUL position in C string buffers, which is shown as an extension to the basic analysis and which thereby demonstrates the modularity of the approach. While the book focuses on a sound analysis of C, it will be useful to any researcher and student with an interest in static analysis of real-world programming languages. In fact, many concepts presented here carry over to other languages such as Java or assembler, to other applications such as taint analysis, array and shape analysis and possibly even to other approaches such as run-time verification and test data generation
Cataloging source
CUS
http://library.link/vocab/creatorName
Simon, Axel
Dewey number
005.435
Illustrations
illustrations
Index
index present
LC call number
QA76.73.C15
LC item number
S545 2008
Literary form
non fiction
Nature of contents
  • dictionaries
  • bibliography
http://library.link/vocab/subjectName
  • C (Computer program language)
  • Memory management (Computer science)
  • Informatique
  • C (Computer program language)
  • Memory management (Computer science)
Label
Value-range analysis of C programs : towards proving the absence of buffer overflow vulnerabilities, Axel Simon
Instantiates
Publication
Bibliography note
Includes bibliographical references and index
Carrier category
online resource
Carrier category code
  • cr
Carrier MARC source
rdacarrier
Content category
text
Content type code
  • txt
Content type MARC source
rdacontent
Contents
From the Contents: Preface -- Introduction.-Value Range Analysis -- Analysing C -- A Semantics for C -- Core C -- Related Work -- Part 1 Abstracting Soundly -- Abstract State Space -- Points-To Analysis -- Numeric Domains -- Taming Casting and Wrapping -- A Language Featuring Finite Integer Arithmetic -- Implicit Wrapping of Polyhedral Variables -- Explicit Wrapping of Polyhedral Variables -- An Abstract Semantics for SubC -- Discussion -- Overlapping Memory Accesses and Pointers -- Memory as a Set of Fields -- Mixing Values and Pointers -- Abstraction Relation -- Abstract Semantics -- Part II Ensuring Efficiency -- Planar Polyhedra -- Operations on Inequalities -- Operations on Sets of Inequalities -- The TVPI Abstract Domain -- The Integral TVPI Domain -- Interfacing Analysis and Numeric Domain -- Inferring Relevant Fields and Addresses -- Applying Widening in Fixpoint Calculations -- Part III Improving Precision -- Tracking String Lengths -- Widening with Landmarks -- Combining Points-To and Numeric Analysis -- Conclusion and Outlook
Control code
554985688
Extent
1 online resource (xxii, 300 pages)
Form of item
online
Isbn
9781848000179
Lccn
2008930099
Media category
computer
Media MARC source
rdamedia
Media type code
  • c
Other control number
10.1007/978-1-84800-017-9
Other physical details
illustrations
http://library.link/vocab/ext/overdrive/overdriveId
978-1-84800-016-2
Specific material designation
remote
System control number
(OCoLC)554985688
Label
Value-range analysis of C programs : towards proving the absence of buffer overflow vulnerabilities, Axel Simon
Publication
Bibliography note
Includes bibliographical references and index
Carrier category
online resource
Carrier category code
  • cr
Carrier MARC source
rdacarrier
Content category
text
Content type code
  • txt
Content type MARC source
rdacontent
Contents
From the Contents: Preface -- Introduction.-Value Range Analysis -- Analysing C -- A Semantics for C -- Core C -- Related Work -- Part 1 Abstracting Soundly -- Abstract State Space -- Points-To Analysis -- Numeric Domains -- Taming Casting and Wrapping -- A Language Featuring Finite Integer Arithmetic -- Implicit Wrapping of Polyhedral Variables -- Explicit Wrapping of Polyhedral Variables -- An Abstract Semantics for SubC -- Discussion -- Overlapping Memory Accesses and Pointers -- Memory as a Set of Fields -- Mixing Values and Pointers -- Abstraction Relation -- Abstract Semantics -- Part II Ensuring Efficiency -- Planar Polyhedra -- Operations on Inequalities -- Operations on Sets of Inequalities -- The TVPI Abstract Domain -- The Integral TVPI Domain -- Interfacing Analysis and Numeric Domain -- Inferring Relevant Fields and Addresses -- Applying Widening in Fixpoint Calculations -- Part III Improving Precision -- Tracking String Lengths -- Widening with Landmarks -- Combining Points-To and Numeric Analysis -- Conclusion and Outlook
Control code
554985688
Extent
1 online resource (xxii, 300 pages)
Form of item
online
Isbn
9781848000179
Lccn
2008930099
Media category
computer
Media MARC source
rdamedia
Media type code
  • c
Other control number
10.1007/978-1-84800-017-9
Other physical details
illustrations
http://library.link/vocab/ext/overdrive/overdriveId
978-1-84800-016-2
Specific material designation
remote
System control number
(OCoLC)554985688

Library Locations

    • Ellis LibraryBorrow it
      1020 Lowry Street, Columbia, MO, 65201, US
      38.944491 -92.326012
    • Engineering Library & Technology CommonsBorrow it
      W2001 Lafferre Hall, Columbia, MO, 65211, US
      38.946102 -92.330125
Processing Feedback ...