A dynamic detection method to C/C++ programs memory vulnerabilities based on pointer analysis

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

1 Citation (Scopus)

Abstract

Aiming at the problem of higher memory consumption and lower execution efficiency during the dynamic detecting to C/C++ programs memory vulnerabilities, this paper presents a dynamic detection method called ISC. The ISC improves the Safe-C using pointer analysis technology. Firstly, the ISC defines a simple and efficient fat pointer representation instead of the safe pointer in the Safe-C. Furthermore, the ISC uses the unification-based analysis algorithm with one level flow static pointer. This identification reduces the number of pointers that need to be converted to fat pointers. Then in the process of program running, the ISC detects memory vulnerabilities through constantly inspecting the attributes of fat pointers. Experimental results indicate that the ISC could detect memory vulnerabilities such as buffer overflows and dangling pointers. Comparing with the Safe-C, the ISC dramatically reduces the memory consumption and lightly improves the execution efficiency.

Original languageEnglish
Title of host publicationProceedings - 2013 IEEE 11th International Conference on Dependable, Autonomic and Secure Computing, DASC 2013
PublisherIEEE Computer Society
Pages52-57
Number of pages6
ISBN (Print)9781479933815
DOIs
Publication statusPublished - 2013
Event11th IEEE International Conference on Dependable, Autonomic and Secure Computing, DASC 2013 - Chengdu, Sichuan, China
Duration: 21 Dec 201322 Dec 2013

Publication series

NameProceedings - 2013 IEEE 11th International Conference on Dependable, Autonomic and Secure Computing, DASC 2013

Conference

Conference11th IEEE International Conference on Dependable, Autonomic and Secure Computing, DASC 2013
Country/TerritoryChina
CityChengdu, Sichuan
Period21/12/1322/12/13

Keywords

  • dynamic detecting
  • fat pointer
  • improved Safe-C
  • memory vulnerability
  • pointer analysis

Fingerprint

Dive into the research topics of 'A dynamic detection method to C/C++ programs memory vulnerabilities based on pointer analysis'. Together they form a unique fingerprint.

Cite this