The NOAA IR serves as an archival repository of NOAA-published products including scientific findings, journal articles, guidelines, recommendations, or other information authored or co-authored by NOAA or funded partners.
As a repository, the NOAA IR retains documents in their original published format to ensure public access to scientific information.
i
Towards Denial-of-Service Memory Vulnerabilities
-
2019
-
-
Source: JSW 2019 Vol.14(9): 423-436
[PDF-2.14 MB]
Details:
-
Journal Title:Journal of the Software
-
Personal Author:
-
NOAA Program & Office:
-
Description:We address the problem of verifying a program to be free of Denial-of-Service memory vulnerabilities. More specifically, we define a program to be safe from DoS attacks if its memory usage at any time during execution is linear to sizes of its inputs. We design an analysis algorithm that verifies if a program satisfies this definition, and reports code snippets in the program that may cause a nonlinear amount of memory usage in case the verification fails. We also formally prove the correctness of our algorithm w.r.t. the above definition. Our experimental results indicate that the analysis algorithm is both effective and efficient.
-
Keywords:
-
Source:JSW 2019 Vol.14(9): 423-436
-
DOI:
-
Document Type:
-
Rights Information:Other
-
Compliance:Submitted
-
Main Document Checksum:
-
Download URL:
-
File Type:
