Input Handling Done Right: Building Hardened Parsers Using Language-Theoretic Security

Anantharaman, Prashant; Millian, Michael C.; Bratus, Sergey; Patterson, Meredith L.

doi:10.1109/secdev.2017.12

Search citation statements

Order By: Relevance

Paper Sections

Select...

Applicability To Modern Systems1

Citation Types

Supporting

Mentioning

Contrasting

Year Published

2021

2023

Publication Types

Select...

Other2

Article1

Relationship

Self Cite0

Independent3

Authors

Journals

Cited by 3 publications

(1 citation statement)

References 7 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The authors demonstrate the feasibility of format discovery supporting formal parser enforcement, but one finding is that the authors discover vulnerabilities in the formats in use. Analysis of format specifications in diverse fields such as industrial control system network protocols, PDF, Executable Linkable Format (ELF), and data description languages have found vulnerabilities or ambiguities in the specification [2,29]. The scope of program verification is generally limited to properties of the program, not the specification.…”

Section: Applicability To Modern Systemsmentioning

confidence: 99%