Source Code Patterns of Buffer Overflow Vulnerabilities in Firefox
| dc.contributor.author | Schuckert, Felix | |
| dc.contributor.author | Hildner, Max | |
| dc.contributor.author | Katt, Basel | |
| dc.contributor.author | Langweg, Hanno | |
| dc.date.accessioned | 2019-03-22T12:24:55Z | |
| dc.date.available | 2019-03-22T12:24:55Z | |
| dc.date.created | 2019-01-09T16:34:21Z | |
| dc.date.issued | 2018 | |
| dc.identifier.isbn | 978-3-88579-675-6 | |
| dc.identifier.uri | http://hdl.handle.net/11250/2591307 | |
| dc.description.abstract | We investigated 50 randomly selected buffer overflow vulnerabilities in Firefox. The source code of these vulnerabilities and the corresponding patches were manually reviewed and patterns were identified. Our main contribution are taxonomies of errors, sinks and fixes seen from a developer's point of view. The results are compared to the CWE taxonomy with an emphasis on vulnerability details. Additionally, some ideas are presented on how the taxonomy could be used to improve the software security education. | nb_NO |
| dc.language.iso | eng | nb_NO |
| dc.publisher | Gesellschaft für Information | nb_NO |
| dc.relation.ispartof | SICHERHEIT 2018 | |
| dc.rights | Navngivelse-DelPåSammeVilkår 4.0 Internasjonal | * |
| dc.rights.uri | http://creativecommons.org/licenses/by-sa/4.0/deed.no | * |
| dc.title | Source Code Patterns of Buffer Overflow Vulnerabilities in Firefox | nb_NO |
| dc.type | Chapter | nb_NO |
| dc.description.version | publishedVersion | nb_NO |
| dc.source.pagenumber | 107-118 | nb_NO |
| dc.identifier.doi | 10.18420/sicherheit2018_08 | |
| dc.identifier.cristin | 1653561 | |
| dc.description.localcode | Under an attribution-ShareAlike 4.0 International (CC BY-SA 4.0) license. | nb_NO |
| cristin.unitcode | 194,63,30,0 | |
| cristin.unitname | Institutt for informasjonssikkerhet og kommunikasjonsteknologi | |
| cristin.ispublished | true | |
| cristin.fulltext | original |
Tilhørende fil(er)
Denne innførselen finnes i følgende samling(er)
Med mindre annet er angitt, så er denne innførselen lisensiert som Navngivelse-DelPåSammeVilkår 4.0 Internasjonal