An efficient and backwards-compatible transformation to ensure memory safety of C programs

No abstract is available for this paper.

• Publication year

  2004

• Venue

  SIGSOFT '04/FSE-12

• Publication date

  2004-10-31

• Fields of study

  Computer Science

• Identifiers
  DOI 10.1145/1029894.1029913
• External record

  Open on Semantic Scholar

• Source metadata

  Semantic Scholar

• No claims are published for this paper.

• No concepts are published for this paper.

• A Practical Dynamic Buffer Overflow Detector

  2004influential reference
• TIED, LibsafePlus: Tools for Runtime Buffer Overflow Protection

  2004cited by this paper
• CCured in the real world

  2003cited by this paper
• Address Obfuscation: An Efficient Approach to Combat a Broad Range of Memory Error Exploits

  2003cited by this paper
• Buffer overrun detection using linear programming and static analysis

  2003cited by this paper
• Protecting C programs from attacks via invalid pointer dereferences

  2003influential reference
• PointGuard™: Protecting Pointers from Buffer Overflow Vulnerabilities

  2003cited by this paper
• CSSV: towards a realistic tool for statically detecting all buffer overflows in C

  2003cited by this paper
• Testing C Programs for Buffer Overflow Vulnerabilities

  2003cited by this paper
• ARCHER: using symbolic, path-sensitive analysis to detect memory access errors

  2003cited by this paper
• Lessons Learned in Implementing and Deploying Crypto Software

  2002cited by this paper
• CCured: type-safe retrofitting of legacy code

  2002influential reference
• Cyclone: A Safe Dialect of C

  2002cited by this paper
• CIL: Intermediate Language and Tools for Analysis and Transformation of C Programs

  2002cited by this paper
• Fail-Safe ANSI-C Compiler: An Approach to Making C Programs Secure: Progress Report

  2002cited by this paper
• RAD: a compile-time solution to buffer overflow attacks

  2001cited by this paper
• FormatGuard: Automatic Protection From printf Format String Vulnerabilities

  2001cited by this paper
• Debugging via Run-Time Type Checking

  2001cited by this paper
• Symbolic bounds analysis of pointers, array indices, and accessed memory regions

  2000cited by this paper
• Transparent Run-Time Defense Against Stack-Smashing Attacks

  2000cited by this paper
• A First Step Towards Automated Detection of Buffer Overrun Vulnerabilities

  2000cited by this paper
• Coping with type casts in C

  1999cited by this paper
• A theory of type qualifiers

  1999cited by this paper
• StackGuard: Automatic Adaptive Detection and Prevention of Buffer-Overflow Attacks

  1998cited by this paper
• Low‐cost, Concurrent Checking of Pointer and Array Accesses in C Programs

  1997influential reference
• Backwards-Compatible Bounds Checking for Arrays and Pointers in C Programs

  1997cited by this paper
• Software caching and computation migration in Olden

  1995influential reference
• Efficient Run-time Monitoring Using Shadow Processing

  1995influential reference
• Efficient detection of all pointer and array access errors

  1994cited by this paper
• Adding run‐time checking to the portable C compiler

  1992cited by this paper
• Fast detection of memory leaks and access errors

  1991cited by this paper
• Garbage collection in an uncooperative environment

  1988cited by this paper

• BSan: A Powerful Identifier-Based Hardware-Independent Memory Error Detector for COTS Binaries

  2025cites this paper
• Evaluating the Effectiveness of Memory Safety Sanitizers

  2025influential citation
• RangeSanitizer: Detecting Memory Errors with Efficient Range Checks

  2025cites this paper
• FRAMER/Miu: Tagged Pointer-based Capability and Fundamental Cost of Memory Safety & Coherence (Position Paper)

  2024cites this paper
• Translating C To Rust: Lessons from a User Study

  2024cites this paper
• A Source-Level Instrumentation Framework for the Dynamic Analysis of Memory Safety

  2023cites this paper
• Deep Class-Incremental Learning: A Survey

  2023cites this paper
• A Smart Status Based Monitoring Algorithm for the Dynamic Analysis of Memory Safety

  2023influential citation
• ABSLearn: a GNN-based framework for aliasing and buffer-size information retrieval

  2023cites this paper
• Accelerating Type Confusion Detection by Identifying Harmless Type Castings

  2023cites this paper
• HWASanIO: Detecting C/C++ Intra-object Overflows with Memory Shading

  2023cites this paper
• CGuard: Scalable and Precise Object Bounds Protection for C

  2023cites this paper
• Class-Incremental Learning: A Survey

  2023cites this paper
• PACSafe: Leveraging ARM Pointer Authentication for Memory Safety in C/C++

  2022cites this paper
• Fat Pointers for Temporal Memory Safety of C

  2022influential citation
• MSWasm: Soundly Enforcing Memory-Safe Execution of Unsafe Code

  2022cites this paper
• Forward Compatible Few-Shot Class-Incremental Learning

  2022cites this paper
• CryptSan: Leveraging ARM Pointer Authentication for Memory Safety in C/C++

  2022cites this paper
• Automated Use-After-Free Detection and Exploit Mitigation: How Far Have We Gone?

  2022cites this paper
• CGuard: Efficient Spatial Safety for C

  2021cites this paper
• Runtime detection of memory errors with smart status

  2021influential citation
• Automated Code Repair to Ensure Spatial Memory Safety

  2021influential citation
• BadASLR: Exceptional Cases of ASLR Aiding Exploitation

  2021cites this paper
• MetaSys: A Practical Open-source Metadata Management System to Implement and Evaluate Cross-layer Optimizations

  2021cites this paper
• Combating Dependence Explosion in Forensic Analysis Using Alternative Tag Propagation Semantics

  2020cites this paper
• S3Library: Automatically Eliminating C/C++ Buffer Overflow using Compatible Safer Libraries

  2020cites this paper
• Complete spatial safety for C and C++ using CHERI capabilities

  2020influential citation
• Verification of dynamic memory allocators based on symbolic program execution

  2020cites this paper
• CrypTag: Thwarting Physical and Logical Memory Vulnerabilities using Cryptographically Colored Memory

  2020cites this paper
• Implementing SoftBound on Binary Executables

  2019influential citation
• FRAMER: A Software-based Capability Model.

  2019cites this paper
• Silhouette: Efficient Protected Shadow Stacks for Embedded Systems

  2019cites this paper
• BOGO: Buy Spatial Memory Safety, Get Temporal Memory Safety (Almost) Free

  2019cites this paper
• FRAMER: a tagged-pointer capability system with memory safety applications

  2019cites this paper
• Silhouette: Efficient Intra-Address Space Isolation for Protected Shadow Stacks on Embedded Systems

  2019cites this paper
• C R ] 1 M ar 2 01 9 FRAMER : A Software-based Capability Model 1

  2019cites this paper
• Detecting memory errors at runtime with source-level instrumentation

  2019influential citation
• Memory access integrity: detecting fine-grained memory access errors in binary code

  2019cites this paper
• SHAKTI-MS: a RISC-V processor for memory safety in C

  2019cites this paper
• Spatio-Temporal Context Reduction: A Pointer-Analysis-Based Static Approach for Detecting Use-After-Free Vulnerabilities

  2018cites this paper
• SoK: Sanitizing for Security

  2018cites this paper
• Types for the Chain of Trust: No (Loader) Write Left Behind

  2018cites this paper
• THE PURDUE UNIVERSITY GRADUATE SCHOOL STATEMENT OF DISSERTATION APPROVAL

  2018cites this paper
• Security Applications of Static Program Analysis

  2018cites this paper
• Understanding and detecting newly emerging attack vectors in cybercrimes

  2018cites this paper
• Type-After-Type: Practical and Complete Type-Safe Memory Reuse

  2018cites this paper
• A Robust and Efficient Defense against Use-after-Free Exploits via Concurrent Pointer Sweeping

  2018cites this paper
• FRAMER: A Cache-friendly Software-based Capability Model

  2018cites this paper
• DangDone: Eliminating Dangling Pointers via Intermediate Pointers

  2018cites this paper
• Hardware Assisted Randomization of Data

  2018cites this paper
• Lightweight verification of array indexing

  2018cites this paper
• Machine-Learning-Guided Typestate Analysis for Static Use-After-Free Detection

  2017cites this paper
• Finding the needle in the heap : combining binary analysis techniques to trigger use-after-free. (Analyses de code binaire pour la détection et le déclenchement de use-after-free)

  2017cites this paper
• Hardware-Assisted Dependable Systems

  2017cites this paper
• Memory Safety for Embedded Devices with nesCheck

  2017cites this paper
• Compiler Optimizations with Retrofitting Transformations: Is there a Semantic Mismatch?

  2017cites this paper
• Toward Linux kernel memory safety

  2017cites this paper
• Shadow state encoding for efficient monitoring of block-level properties

  2017cites this paper
• SGXBOUNDS: Memory Safety for Shielded Execution

  2017cites this paper
• Lightweight runtime checking of C programs with RTC

  2016cites this paper
• Tag-Protector: An Effective and Dynamic Detection of Illegal Memory Accesses through Compile Time Code Instrumentation

  2016cites this paper
• Preventing exploits against memory corruption vulnerabilities

  2016cites this paper
• Eliminating Redundant Bounds Checks in Dynamic Buffer Overflow Detection Using Weakest Preconditions

  2016cites this paper
• Protecting computer systems through eliminating or analyzing vulnerabilities

  2016influential citation
• Leveraging Static Analysis Tools for Improving Usability of Memory Error Sanitization Compilers

  2016cites this paper
• Fast as a shadow, expressive as a tree: Optimized memory monitoring for C

  2016cites this paper
• Security techniques for sensor systems and the Internet of Things

  2016cites this paper
• A Library-Augmented Type-Safe Subset of C + +

  2016cites this paper
• Flexible and efficient accelerator architecture for runtime monitoring

  2016cites this paper
• Exploiting and Protecting Dynamic Code Generation

  2015cites this paper
• SUDUTA: Script UAF Detection Using Taint Analysis

  2015cites this paper
• Type Casting Verification: Stopping an Emerging Attack Vector

  2015cites this paper
• FreeSentry: protecting against use-after-free vulnerabilities due to dangling pointers

  2015cites this paper
• VTint: Protecting Virtual Function Tables' Integrity

  2015cites this paper
• Accelerating Dynamic Detection of Memory Errors for C Programs via Static Analysis

  2015influential citation
• Provenance-based Integrity Protection for Windows

  2015cites this paper
• Control Flow and Code Integrity for COTS binaries: An Effective Defense Against Real-World ROP Attacks

  2015cites this paper
• Novel Designs for Memory Checkers Using Semantics and Digital Sequential Circuits

  2015cites this paper
• 1st Summit on Advances in Programming Languages, SNAPL 2015, Asilomar, California, USA, May 3-6, 2015

  2015cites this paper
• CETS : Compiler-Enforced Temporal Safety for C Santosh Nagarakatte Jianzhou

  2015influential citation
• A Principled Approach for ROP Defense

  2015cites this paper
• Everything You Want to Know About Pointer-Based Checking

  2015cites this paper
• Preventing Exploits Against Software of Uncertain Provenance (PEASOUP)

  2015cites this paper
• Static Analysis To Improve Compiler Sanitization

  2015cites this paper
• Preventing Use-after-free with Dangling Pointers Nullification

  2015cites this paper
• JITScope: Protecting web users from control-flow hijacking attacks

  2015cites this paper
• Runtime checking C programs

  2015cites this paper
• Fast as a shadow, expressive as a tree: hybrid memory monitoring for C

  2015cites this paper
• SafeDispatch: Securing C++ Virtual Calls from Memory Corruption Attacks

  2014cites this paper
• WatchdogLite: Hardware-Accelerated Compiler-Based Pointer Checking

  2014cites this paper
• WPBOUND: Enforcing Spatial Memory Safety Efficiently at Runtime with Weakest Preconditions

  2014cites this paper
• POSTER: UAFChecker: Scalable Static Detection of Use-After-Free Vulnerabilities

  2014cites this paper
• AHEMS: Asynchronous Hardware-Enforced Memory Safety

  2014cites this paper
• Ironclad C++: a library-augmented type-safe subset of c++

  2013cites this paper
• Hardware-Enforced Comprehensive Memory Safety

  2013cites this paper
• Practical Control Flow Integrity and Randomization for Binary Executables

  2013cites this paper
• CPM: Masking Code Pointers to Prevent Code Injection Attacks

  2013cites this paper
• A Dynamic Detection Method to C/C++ Programs Memory Vulnerabilities Based on Pointer Analysis

  2013cites this paper
• Hardware-enforced Comprehensive Memory Safety the Watchdog Approach Efficiently Eliminates an Entire Class of Security Vulnerabilities by Enforcing Memory Safety in Hardware. Watchdog Maintains Per-pointer Bounds and Identifier Metadata in a Disjoint Shadow Space to Ensure Compatibility with Existin

  2013cites this paper
• An Optimized Memory Monitoring for Runtime Assertion Checking of C Programs

  2013cites this paper