55 search results - page 4 / 11 » Automated Code Review Tools for Security |
ICSEA
2008
IEEE
14 years 1 months ago
2008
IEEE
The Reuse of code artefacts can make development quicker, cheaper and more robust, but the process is complex and has many pitfalls: Code artefacts must exist, be available, be fo...
SP
2009
IEEE
14 years 2 months ago
2009
IEEE
This paper describes the design, implementation and evaluation of Native Client, a sandbox for untrusted x86 native code. Native Client aims to give browser-based applications the...
CSFW
2004
IEEE
13 years 11 months ago
2004
IEEE
We present a new static analysis for reviewing the security of libraries for systems, such as JVMs or the CLR, that rely on stack inspection for access control. We describe its im...
SOSP
2003
ACM
14 years 4 months ago
2003
ACM
This paper presents a new approach called model-carrying code (MCC) for safe execution of untrusted code. At the heart of MCC is the idea that untrusted code comes equipped with a...
EUROSYS
2008
ACM
14 years 4 months ago
2008
ACM
The internal libraries of Linux are evolving rapidly, to address new requirements and improve performance. These evolutions, however, entail a massive problem of collateral evolut...