Bouncer: securing software by blocking bad input

Keywords

Exploit, Computer science, Overhead (engineering), Symbolic execution, False positive paradox

References

• Non-Control-Data Attacks Are Realistic ThreatsShuo Chen, Jun Xu, Emre C. Sezer — 2005
• Compilers: Principles, Techniques, and ToolsAlfred V. Aho, Ravi Sethi, Jeffrey D. Ullman — 1986
• The formal semantics of programming languages - an introductionG. Winskel — 1993
• Enhancing Server Availability and Security Through Failure-Oblivious ComputingMartin Rinard, Cristian Cadar, Daniel Dumitran — 2004
• A Practical Dynamic Buffer Overflow DetectorOlatunji Ruwase, Monica S. Lam — 2004
• Side Effects Are Not Sufficient to Authenticate SoftwareUmesh Shankar, Monica Chew, J. D. Tygar — 2004
• Automated Worm FingerprintingSumeet Singh, Cristian Estan, George Varghese — 2004
• StackGuard: Automatic Adaptive Detection and Prevention of Buffer-Overflow AttacksCrispin Cowan, Calton Pu, Dave Maier — 1998
• CUTE: a concolic unit testing engine for CKoushik Sen, Darko Marinov, Gul Agha — 2005
• Cost effective dynamic program slicingXiangyu Zhang, Rajiv Gupta — 2004
• Inside the Slammer WormDavid Moore, Vern Paxson, Stefan Savage — 2003
• HoneycombChristian Kreibich, Jon Crowcroft — 2004
• Guarded commands, nondeterminacy and formal derivation of programsEdsger W. Dijkstra — 1975
• DART: directed automated random testingPatrice Godefroid, Nils Klarlund, Koushik Sen — 2005
• On deriving unknown vulnerabilities from zero-day polymorphic and metamorphic worm exploitsJedidiah R. Crandall, Zhendong Su, S. Felix Wu — 2005
• Towards automatic generation of vulnerability-based signaturesDavid Brumley, J.P. Newsome, Dawn Song — 2006
• A survey of rollback-recovery protocols in message-passing systemsE. N. Mootaz Elnozahy, Lorenzo Alvisi, Yi‐Min Wang — 2002
• Symbolic execution and program testingJames C. King — 1976
• Dynamic Taint Analysis for Automatic Detection, Analysis, and SignatureGeneration of Exploits on Commodity SoftwareJames Newsome, Dawn Song — 2005
• Vigilante: End-to-end containment of Internet worm epidemicsManuel Costa, Jon Crowcroft, Miguel Castro — 2008

Cited by

• Efficient Directionless Weakest Preconditions (CMU-CyLab-10-002)David Brumley, Ivan Jager — 2010
• MetaSymploit: Day-One Defense against Script-based Attacks with Security-Enhanced Symbolic AnalysisRuowen Wang, Peng Ning, Tao Xie — 2013
• Towards Generating High Coverage Vulnerability-Based Signatures with Protocol-Level Constraint-Guided ExplorationJuan Caballero, Zhenkai Liang, Pongsin Poosankam — 2009
• Using information flow tracking to protect legacy binariesJ.M. Slowinska — 2012
• Improving failure diagnosis via better design and analysis of log messagesDing Yuan — 2012
• KLEE: unassisted and automatic generation of high-coverage tests for complex systems programsCristian Cadar, Daniel Dunbar, Dawson Engler — 2008
• The Hidden Difficulties of Watching and Rebuilding NetworksMichael E. Locasto, Angelos Stavrou — 2008
• Crashmaker: an improved binary concolic testing tool for vulnerability detectionChen Bing, Qingkai Zeng, Weiguang Wang — 2014
• First-aid: surviving and preventing memory management bugs during production runsQi Gao, Wenbin Zhang, Yan Tang — 2009
• Automatic exploit generationThanassis Avgerinos, Sang Kil, Alexandre Rebert — 2014
• Vigilante: End-to-end containment of Internet worm epidemicsManuel Costa, Jon Crowcroft, Miguel Castro — 2008
• Better bug reporting with better privacyMiguel Castro, Manuel Costa, Jean‐Philippe Martin — 2008
• Extracting Models of Security-Sensitive Operations using String-Enhanced White-Box Exploration on BinariesJuan Caballero, Stephen McCamant, Adam Barth — 2009
• Grammar and model extraction for security applications using dynamic program binary analysisDawn Song, Juan Caballero Bayerri — 2010
• S2E: a platform for in-vivo multi-path analysis of software systemsVitaly Chipounov, Volodymyr Kuznetsov, George Candea — 2011
• Sound and Precise Analysis of Multithreaded Programs through Schedule Specialization and Execution FiltersJingyue Wu — 2014
• Stable Multithreading: A New Paradigm for Reliable and Secure ThreadsHeming Cui — 2015
• Generating Vulnerability Signatures for String Manipulating Programs Using Automata-Based Forward and Backward Symbolic AnalysesFang Yu, Muath Alkhalaf, Tevfik Bultan — 2009
• Game-theoretic intrusion response and recoverySaman Zonouz — 2011
• Maximal specification synthesisAws Albarghouthi, Işıl Dillig, Arie Gurfinkel — 2016

Related papers

• Constructing a Knowledge Base for Software Security Detection Based on Similar Call GraphJingfeng Xue, Changzhen Hu, Kunsheng Wang — 2009
• An Approach to Reachability Determination for Static Analysis Defects with the Help of Dynamic Symbolic ExecutionA. Yu. Gerasimov, Leonid Kruglov, M.K. Ermakov — 2018
• Malware Similarity Identification Using Call Graph Based System Call Subsequence FeaturesKristina Blokhin, Josh Saxe, David Mentis — 2013
• e-NeXSh: achieving an effectively non-executable stack and heap via system-call policingGaurav S. Kc, Angelos D. Keromytis — 2005
• Improving the Precision of Call Graph Construction for Webassembly with Symbolic Execution and SlicingMATTIA PACCAMICCIO, Franco Raimondi, Kelly Androutsopoulos — 2023
• Keshmesh: Bringing Advanced Static Analysis to Concurrency Bug Pattern DetectorsMohsen Vakilian, Stas Negara, Samira Tasharofi — 2013
• BotProfiler: Detecting Malware-Infected Hosts by Profiling Variability of Malicious InfrastructureDaiki Chiba, Takeshi Yagi, Mitsuaki Akiyama — 2016
• Bug Finder Evaluation Guided Program Analysis ImprovementLiyuan Jia, Wei Dong, Bailin Lu — 2019
• SnugglebugSatish Chandra, Stephen J. Fink, Manu Sridharan — 2009
• An approach of reachability determination for static analysis defects with help of dynamic symbolic executionGerasimov A.Y., Kruglov L.V., Ermakov M.K. — 2017