A Comparison of Publicly Available Tools for Static Intrusion Prevention (2002)
| Citations: | 20 - 0 self |
BibTeX
@MISC{Wilander02acomparison,
author = {John Wilander and Mariam Kamkar},
title = {A Comparison of Publicly Available Tools for Static Intrusion Prevention},
year = {2002}
}
Years of Citing Articles
Bookmark
 |
 |
 |
 |
 |
 |
OpenURL
Abstract
The size and complexity of today's software systems is growing, increasing the number of bugs and thus the possibility of security vulnerabilities. Two common attacks against such vulnerabilities are buffer overflow and format string attacks. In this paper we implement a testbed of 44 function calls in C to empirically compare five publicly available tools for static analysis aiming to stop these attacks. The results show very high rates of false positives for the tools building on lexical analysis and very low rates of true positives for the tools building on syntactical and semantical analysis.
