Source transformation in software engineering using the TXL transformation system

Cordy, James R.; Dean, Thomas R.; Malton, Andrew J.; Schneider, Kevin A.

doi:10.1016/s0950-5849(02)00104-0

Cited by 90 publications

(65 citation statements)

References 14 publications

(14 reference statements)

Supporting

Mentioning

Contrasting

Order By: Relevance

“…We have applied the protection mechanism on five open source network server programs, as shown in Table 1. Source code transformation is done by using TXL [26], a special-purpose programming language designed for software analysis and source code transformation. We extend the Gemini tool [24], which transforms source code to reposition stack-based buffers on the heap by using TXL, to protect local buffers with guard pages.…”

Section: Performance Evaluationmentioning

confidence: 99%

A Lightweight Buffer Overflow Protection Mechanism with Failure-Oblivious Capability

Lee

Chiu

Chang

2009

Algorithms and Architectures for Parallel Processing

View full text Add to dashboard Cite

Abstract. Buffer overflow has become a major source of network security vulnerability. Traditional schemes for detecting buffer overflow attacks usually terminate the attacked service, degrading the service availability. In this paper, we propose a lightweight buffer overflow protection mechanism that allows continued network service. The proposed mechanism allows a service program to reconfigure itself to identify and protect the vulnerable functions upon buffer overflow attacks. Protecting only the vulnerable functions, instead of the whole program, keeps the runtime overhead small. Moreover, the mechanism adopts the idea of failure-oblivious computing to allow service programs to execute through memory errors caused by the attacks once the vulnerable functions have been identified, eliminating the need of restarting the service program upon further attacks to the vulnerable functions. We have applied the mechanism on five Internet servers. The experiment results show that the mechanism has little impact on the runtime performance.

show abstract

Section: Performance Evaluationmentioning

confidence: 99%

A Lightweight Buffer Overflow Protection Mechanism with Failure-Oblivious Capability

Lee

Chiu

Chang

2009

Algorithms and Architectures for Parallel Processing

View full text Add to dashboard Cite

show abstract

“…In essence this step converts the concrete syntax into an abstract syntax better suited to a particular analysis. Most parsers are compiler-based and process the entire language [27,35]. When only a subset of the concrete syntax must be processed, lighter-weight techniques can be applied.…”

Section: Anatomy Of a Source Code Analysismentioning

confidence: 99%

Source Code Analysis: A Road Map

Binkley

2007

Future of Software Engineering (FOSE '07)

141

View full text Add to dashboard Cite

“…Stage one uniquely names all entities in the project while extracting the entity and relationship facts. This process is accomplished with a TXL program using syntactic pattern matching [2,4]. At this point, the method call facts are not uniquely identified since we do not have sufficient information to identify which package or class the method being called belongs to.…”

Section: Project Watchermentioning

confidence: 99%