{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,25]],"date-time":"2026-10-25T21:44:33Z","timestamp":1792964673944,"version":"4.5.0"},"publisher-location":"Cham","reference-count":45,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783319085081","type":"print"},{"value":"9783319085098","type":"electronic"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2014]]},"DOI":"10.1007\/978-3-319-08509-8_14","type":"book-chapter","created":{"date-parts":[[2014,6,13]],"date-time":"2014-06-13T07:04:32Z","timestamp":1402643072000},"page":"255-275","source":"Crossref","is-referenced-by-count":7,"title":["Diagnosis and Emergency Patch Generation for Integer Overflow Exploits"],"prefix":"10.1007","author":[{"given":"Tielei","family":"Wang","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Chengyu","family":"Song","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Wenke","family":"Lee","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","reference":[{"key":"14_CR1","doi-asserted-by":"publisher","first-page":"246","DOI":"10.1145\/93548.93576","volume":"25","author":"H. Agrawal","year":"1990","unstructured":"Agrawal, H., Horgan, J.R.: Dynamic program slicing. SIGPLAN Not.\u00a025, 246\u2013256 (1990)","journal-title":"SIGPLAN Not."},{"key":"14_CR2","unstructured":"Barrett, C., Stump, A., Tinelli, C.: The smt-lib v2 language and tools: A tutorial (February 2011), www.smtlib.org"},{"key":"14_CR3","doi-asserted-by":"crossref","unstructured":"Bilge, L., Dumitras, T.: Before we knew it: an empirical study of zero-day attacks in the real world. In: CCS (2012)","DOI":"10.1145\/2382196.2382284"},{"key":"14_CR4","unstructured":"Brumley, D., cker Chiueh, T., Johnson, R., Lin, H., Song, D.: Rich: Automatically protecting against integer-based vulnerabilities. In: NDSS (2007)"},{"key":"14_CR5","doi-asserted-by":"crossref","unstructured":"Brumley, D., Newsome, J., Song, D., Wang, H., Jha, S.: Towards automatic generation of vulnerability signatures. In: IEEE Symposium on Security and Privacy (May 2006)","DOI":"10.21236\/ADA462599"},{"key":"14_CR6","doi-asserted-by":"crossref","unstructured":"Brumley, D., Wang, H., Jha, S., Song, D.: Creating vulnerability signatures using weakest preconditions. In: IEEE Computer Security Foundations Symposium (2007)","DOI":"10.1109\/CSF.2007.17"},{"key":"14_CR7","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"161","DOI":"10.1007\/978-3-642-04342-0_9","volume-title":"Recent Advances in Intrusion Detection","author":"J. Caballero","year":"2009","unstructured":"Caballero, J., Liang, Z., Poosankam, P., Song, D.: Towards generating high coverage vulnerability-based signatures with protocol-level constraint-guided exploration. In: Kirda, E., Jha, S., Balzarotti, D. (eds.) RAID 2009. LNCS, vol.\u00a05758, pp. 161\u2013181. Springer, Heidelberg (2009)"},{"key":"14_CR8","doi-asserted-by":"crossref","unstructured":"Coker, Z., Hafiz, M.: Program transformations to fix c integers. In: ICSE (2013)","DOI":"10.1109\/ICSE.2013.6606625"},{"key":"14_CR9","doi-asserted-by":"crossref","unstructured":"Costa, M., Castro, M., Zhou, L., Zhang, L., Peinado, M.: Bouncer: securing software by blocking bad input. In: ACM SIGOPS Symposium on Operating Systems Principles (2007)","DOI":"10.1145\/1294261.1294274"},{"key":"14_CR10","doi-asserted-by":"crossref","unstructured":"Costa, M., Crowcroft, J., Castro, M., Rowstron, A., Zhou, L., Zhang, L., Barham, P.: Vigilante: end-to-end containment of internet worms. In: SOSP (2005)","DOI":"10.1145\/1095810.1095824"},{"key":"14_CR11","doi-asserted-by":"crossref","unstructured":"Crandall, J.R., Su, Z., Wu, S.F., Chong, F.T.: On deriving unknown vulnerabilities from zero-day polymorphic and metamorphic worm exploits. In: CCS (2005)","DOI":"10.1145\/1102120.1102152"},{"key":"14_CR12","doi-asserted-by":"crossref","unstructured":"Cui, W., Peinado, M., Wang, H.J., Locasto, M.E.: Shieldgen: Automatic data patch generation for unknown vulnerabilities with informed probing. In: IEEE Symposium on Security and Privacy (2007)","DOI":"10.1109\/SP.2007.34"},{"key":"14_CR13","doi-asserted-by":"crossref","unstructured":"Dietz, W., Li, P., Regehr, J., Adve, V.: Understanding integer overflow in c\/c++. In: ICSE (2012)","DOI":"10.1109\/ICSE.2012.6227142"},{"key":"14_CR14","unstructured":"Frei, S., Tellenbach, B., Plattner, B.: 0-day patch - exposing vendors (in)security performance. In: BlackHat Europe (2008)"},{"key":"14_CR15","unstructured":"Jee, K., Portokalidis, G., Kemerlis, V.P., Ghosh, S., August, D.I., Keromytis, A.D.: A general approach for efficiently accelerating software-based dynamic data flow tracking on commodity hardware. In: NDSS (2012)"},{"key":"14_CR16","doi-asserted-by":"crossref","unstructured":"Kemerlis, V.P., Portokalidis, G., Jee, K., Keromytis, A.D.: libdft: practical dynamic data flow tracking for commodity systems. In: VEE (2012)","DOI":"10.1145\/2151024.2151042"},{"key":"14_CR17","unstructured":"Lee, J., Avgerinos, T., Brumley, D.: Tie: Principled reverse engineering of types in binary programs. In: NDSS (2011)"},{"key":"14_CR18","doi-asserted-by":"crossref","unstructured":"Lin, Z., Jiang, X., Xu, D., Mao, B., Xie, L.: Autopag: Towards automated software patch generation with source code root cause identification and repair. In: Proceedings of the 2nd ACM Symposium on Information, Computer and Communications Security (2007)","DOI":"10.1145\/1229285.1267001"},{"key":"14_CR19","unstructured":"Lin, Z., Zhang, X., Xu, D.: Automatic reverse engineering of data structures from binary execution. In: NDSS (2010)"},{"key":"14_CR20","doi-asserted-by":"crossref","unstructured":"Long, F., Ganesh, V., Carbin, M., Sidiroglou, S., Rinard, M.: Automatic input rectification. In: ICSE (2012)","DOI":"10.1109\/ICSE.2012.6227204"},{"key":"14_CR21","unstructured":"Luk, C.-K., Cohn, R., Muth, R., Patil, H., Klauser, A., Lowney, G., Wallace, S., Reddi, V.J., Hazelwood, K.: Pin: Building Customized Program Analysis Tools with Dynamic Instrumentation. In: PLDI (2005)"},{"key":"14_CR22","unstructured":"Maurer, M., Brumley, D.: Tachyon: tandem execution for efficient live patch testing. In: USENIX Conference on Security Symposium (2012)"},{"key":"14_CR23","unstructured":"min Wang, Y., Beck, D., Jiang, X., Roussev, R., Verbowski, C., Chen, S., King, S.: Automated web patrol with strider honeymonkeys: Finding web sites that exploit browser vulnerabilities. In: Proceedings of the Network and Distributed Systems Security Symposium (2006)"},{"key":"14_CR24","unstructured":"Molnar, D., Li, X.C., Wagner, D.A.: Dynamic test generation to find integer bugs in x86 binary linux programs. In: Proceedings of the 18th USENIX Security Symposium (2009)"},{"key":"14_CR25","unstructured":"Newsome, J., Brumley, D., Song, D.: Vulnerability-specific execution filtering for exploit prevention on commodity software. In: NDSS (2008)"},{"key":"14_CR26","unstructured":"Newsome, J., Karp, B., Song, D.: Polygraph: Automatically generating signatures for polymorphic worms. In: IEEE Symposium on Security and Privacy (2005)"},{"key":"14_CR27","unstructured":"Newsome, J., Song, D.: Dynamic taint analysis: Automatic detection, analysis, and signature generation of exploit attacks on commodity software. In: NDSS (2005)"},{"key":"14_CR28","doi-asserted-by":"crossref","unstructured":"Perkins, J.H., Kim, S., Larsen, S., Amarasinghe, S., Bachrach, J., Carbin, M., Pacheco, C., Sherwood, F., Sidiroglou, S., Sullivan, G., Wong, W.-F., Zibin, Y., Ernst, M.D., Rinard, M.: Automatically patching errors in deployed software. In: SOSP (2009)","DOI":"10.1145\/1629575.1629585"},{"key":"14_CR29","doi-asserted-by":"crossref","unstructured":"Portokalidis, G., Slowinska, A., Bos, H.: Argos: an emulator for fingerprinting zero-day attacks for advertised honeypots with automatic signature generation. In: Proceedings of the 1st ACM SIGOPS\/EuroSys European Conference on Computer Systems (2006)","DOI":"10.1145\/1217935.1217938"},{"key":"14_CR30","doi-asserted-by":"crossref","unstructured":"Qin, F., Tucek, J., Sundaresan, J., Zhou, Y.: Rx: treating bugs as allergies\u2014a safe method to survive software failures. In: SOSP (2005)","DOI":"10.1145\/1095810.1095833"},{"key":"14_CR31","doi-asserted-by":"crossref","unstructured":"Ruwase, O., Chen, S., Gibbons, P.B., Mowry, T.C.: Decoupled lifeguards: enabling path optimizations for dynamic correctness checking tools. In: PLDI (2010)","DOI":"10.1145\/1806596.1806600"},{"key":"14_CR32","doi-asserted-by":"crossref","unstructured":"Sidiroglou, S., Laadan, O., Keromytis, A.D., Nieh, J.: Using rescue points to navigate software recovery. In: IEEE Symposium on Security and Privacy (2007)","DOI":"10.1109\/SP.2007.38"},{"key":"14_CR33","doi-asserted-by":"crossref","unstructured":"Sidiroglou, S., Laadan, O., Perez, C., Viennot, N., Nieh, J., Keromytis, A.D.: Assure: automatic software self-healing using rescue points. In: ASPLOS (2009)","DOI":"10.1145\/1508244.1508250"},{"key":"14_CR34","unstructured":"Sidiroglou, S., Locasto, M.E., Boyd, S.W., Keromytis, A.D.: Building a reactive immune system for software services. In: USENIX Annual Technical Conference (2005)"},{"key":"14_CR35","doi-asserted-by":"crossref","unstructured":"Tucek, J., Newsome, J., Lu, S., Huang, C., Xanthos, S., Brumley, D., Zhou, Y., Song, D.: Sweeper: a lightweight end-to-end system for defending against fast worms. In: EuroSys (2007)","DOI":"10.1145\/1272996.1273010"},{"key":"14_CR36","doi-asserted-by":"crossref","unstructured":"Wang, H.J., Guo, C., Simon, D.R., Zugenmaier, A.: Shield: vulnerability-driven network filters for preventing known vulnerability exploits. In: Sigcomm (2004)","DOI":"10.1145\/1015467.1015489"},{"key":"14_CR37","doi-asserted-by":"crossref","unstructured":"Wang, T., Wei, T., Gu, G., Zou, W.: Checksum-aware fuzzing combined with dynamic taint analysis and symbolic execution. ACM Trans. Inf. Syst. Secur.\u00a02 (September 2011)","DOI":"10.1145\/2019599.2019600"},{"key":"14_CR38","unstructured":"Wang, T., Wei, T., Lin, Z., Zou, W.: IntScope: Automatically Detecting Integer Overflow Vulnerability in X86 Binary Using Symbolic Execution. In: NDSS (2009)"},{"key":"14_CR39","unstructured":"Wang, X., Chen, H., Jia, Z., Zeldovich, N., Kaashoek, M.F.: Improving integer security for systems with kint. In: OSDI (2012)"},{"key":"14_CR40","doi-asserted-by":"crossref","unstructured":"Wang, X., Li, Z., Xu, J., Reiter, M.K., Kil, C., Choi, J.Y.: Packet vaccine: black-box exploit detection and signature generation. In: CCS (2006)","DOI":"10.1145\/1180405.1180412"},{"key":"14_CR41","doi-asserted-by":"crossref","unstructured":"Weimer, W., Nguyen, T., Le Goues, C., Forrest, S.: Automatically finding patches using genetic programming. In: International Conference on Software Engineering (2009)","DOI":"10.1109\/ICSE.2009.5070536"},{"key":"14_CR42","doi-asserted-by":"crossref","unstructured":"Xu, J., Ning, P., Kil, C., Zhai, Y., Bookholt, C.: Automatic diagnosis and response to memory corruption vulnerabilities. In: CCS (2005)","DOI":"10.1145\/1102120.1102151"},{"key":"14_CR43","doi-asserted-by":"crossref","unstructured":"Yin, Z., Yuan, D., Zhou, Y., Pasupathy, S., Bairavasundaram, L.: How do fixes become bugs? \u2013 a comprehensive characteristic study on incorrect fixes in commercial and open source operating systems. In: FSE (2011)","DOI":"10.1145\/2025113.2025121"},{"key":"14_CR44","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"71","DOI":"10.1007\/978-3-642-15497-3_5","volume-title":"Computer Security \u2013 ESORICS 2010","author":"C. Zhang","year":"2010","unstructured":"Zhang, C., Wang, T., Wei, T., Chen, Y., Zou, W.: IntPatch: Automatically fix integer-overflow-to-buffer-overflow vulnerability at compile-time. In: Gritzalis, D., Preneel, B., Theoharidou, M. (eds.) ESORICS 2010. LNCS, vol.\u00a06345, pp. 71\u201386. Springer, Heidelberg (2010)"},{"key":"14_CR45","unstructured":"Zhang, M., Prakash, A., Li, X., Liang, Z., Yin, H.: Identifying and Analyzing Pointer Misuses for Sophisticated Memory-corruption Exploit Diagnosis. In: NDSS (2012)"}],"container-title":["Lecture Notes in Computer Science","Detection of Intrusions and Malware, and Vulnerability Assessment"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-319-08509-8_14","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,7,14]],"date-time":"2023-07-14T07:17:31Z","timestamp":1689319051000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-319-08509-8_14"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2014]]},"ISBN":["9783319085081","9783319085098"],"references-count":45,"URL":"https:\/\/doi.org\/10.1007\/978-3-319-08509-8_14","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2014]]}}}