ESSOS
2009
Springer
14 years 4 months ago
2009
Springer
Abstract. To understand the effect of code complexity on static analysis, thirty-five format string vulnerabilities were studied. We analyzed two code samples for each vulnerabilit...
ESSOS
2009
Springer
14 years 4 months ago
2009
Springer
Abstract. We present an approach to security requirements engineering, which makes use of special kinds of problem frames that serve to structure, characterize, analyze, and solve ...
ESSOS
2009
Springer
14 years 5 months ago
2009
Springer
Injection attacks and their defense require a lot of creativity from attackers and secure system developers. Unfortunately, as attackers rely increasingly on systematic approaches ...
ESSOS
2009
Springer
14 years 7 months ago
2009
Springer
Through first-responder access to sensitive information for which they have not been pre-vetted, lives and property can be saved. We describe enhancements to a trusted emergency i...
ESSOS
2009
Springer
14 years 7 months ago
2009
Springer
Abstract. Software vendors are increasingly concerned about mitigating the security risk of their software. Code quality improvement is a traditional approach to mitigate security ...
ESSOS
2009
Springer
14 years 7 months ago
2009
Springer
Abstract. Memory errors continue to be a major source of software failure. To address this issue, we present MEDS (Memory Error Detection System), a system for detecting memory err...
ESSOS
2009
Springer
14 years 7 months ago
2009
Springer
Discovery of security vulnerabilities is on the rise. As a result, software development teams must place a higher priority on preventing the injection of vulnerabilities in softwar...
ESSOS
2009
Springer
14 years 7 months ago
2009
Springer
In the search for metrics that can predict the presence of vulnerabilities early in the software life cycle, there may be some benefit to choosing metrics from the non-security rea...
ESSOS
2009
Springer
14 years 7 months ago
2009
Springer
Abstract. When a vulnerability is discovered in a cryptographic algorithm, or in a specific implementation of that algorithm, it is important that software using that algorithm or...