{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,11,18]],"date-time":"2025-11-18T12:10:09Z","timestamp":1763467809552,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":24,"publisher":"ACM","license":[{"start":{"date-parts":[[2007,6,13]],"date-time":"2007-06-13T00:00:00Z","timestamp":1181692800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2007,6,13]]},"DOI":"10.1145\/1251535.1251546","type":"proceedings-article","created":{"date-parts":[[2007,9,14]],"date-time":"2007-09-14T16:07:37Z","timestamp":1189786057000},"page":"63-68","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":6,"title":["Refining buffer overflow detection via demand-driven path-sensitive analysis"],"prefix":"10.1145","author":[{"given":"Wei","family":"Le","sequence":"first","affiliation":[{"name":"University of Virginia, Charlottesville, VA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mary Lou","family":"Soffa","sequence":"additional","affiliation":[{"name":"University of Virginia, Charlottesville, VA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2007,6,13]]},"reference":[{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1145\/258915.258929"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1145\/267895.267921"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1002\/(SICI)1097-024X(200006)30:7%3C775::AID-SPE309%3E3.0.CO;2-H"},{"key":"e_1_3_2_1_5_1","unstructured":"CERT. http:\/\/www.cert.org.  CERT. http:\/\/www.cert.org."},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/586110.586142"},{"key":"e_1_3_2_1_7_1","volume-title":"Proceedings of the 14th USENIX Security Symposium","author":"Chen S.","year":"2005","unstructured":"S. Chen , J. Xu , E. Sezer , P. Gauriar , and R. Iyer . Non--control--data attacks are realistic threats . In Proceedings of the 14th USENIX Security Symposium , 2005 . S. Chen, J. Xu, E. Sezer, P. Gauriar, and R. Iyer. Non--control--data attacks are realistic threats. In Proceedings of the 14th USENIX Security Symposium, 2005."},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/512529.512538"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.5555\/227726.227845"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/267959.269970"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1145\/231379.231389"},{"key":"e_1_3_2_1_12_1","unstructured":"Fortify. http:\/\/www.fortifysoftware.com.  Fortify. http:\/\/www.fortifysoftware.com."},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/1134285.1134319"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1145\/174662.174663"},{"key":"e_1_3_2_1_15_1","volume-title":"Proceedings of Workshop on the Evaluation of Software Defect Detection Tools","author":"Lu S.","year":"2005","unstructured":"S. Lu , Z. Li , F. Qin , L. Tan , P. Zhou , and Y. Zhou . Bugbench: Benchmarks for evaluating bug detection tools . In Proceedings of Workshop on the Evaluation of Software Defect Detection Tools , 2005 . S. Lu, Z. Li, F. Qin, L. Tan, P. Zhou, and Y. Zhou. Bugbench: Benchmarks for evaluating bug detection tools. In Proceedings of Workshop on the Evaluation of Software Defect Detection Tools, 2005."},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/1029894.1029907"},{"key":"e_1_3_2_1_17_1","unstructured":"Microsoft. Phoenix: A software optimization and analysis framework. http:\/\/research.microsoft.com\/phoenix\/.  Microsoft. Phoenix: A software optimization and analysis framework. http:\/\/research.microsoft.com\/phoenix\/."},{"key":"e_1_3_2_1_18_1","unstructured":"Microsoft. Prefast.http:\/\/www.microsoft.com\/whdc\/devtools\/tools\/prefast.mspx.  Microsoft. Prefast.http:\/\/www.microsoft.com\/whdc\/devtools\/tools\/prefast.mspx."},{"key":"e_1_3_2_1_19_1","unstructured":"A. One. Smashing the stack for fun and profit. http:\/\/www.phrack.org\/archives\/49\/P49--14.  A. One. Smashing the stack for fun and profit. http:\/\/www.phrack.org\/archives\/49\/P49--14."},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1007\/11823230_26"},{"key":"e_1_3_2_1_21_1","unstructured":"SecuriTeam. http:\/\/www.securiteam.com\/.  SecuriTeam. http:\/\/www.securiteam.com\/."},{"key":"e_1_3_2_1_22_1","volume-title":"Proceedings of Network and Distributed System Security Symposium","author":"Wagner D.","year":"2000","unstructured":"D. Wagner , J. S. Foster , E. A. Brewer , and A. Aiken . A first step towards automated detection of buffer overrun vulnerabilities . In Proceedings of Network and Distributed System Security Symposium , 2000 . D. Wagner, J. S. Foster, E. A. Brewer, and A. Aiken. A first step towards automated detection of buffer overrun vulnerabilities. In Proceedings of Network and Distributed System Security Symposium, 2000."},{"key":"e_1_3_2_1_23_1","unstructured":"R. Wojtczuk. The advanced return--into-lib(c) exploits. http:\/\/www.phrack.org 2001.  R. Wojtczuk. The advanced return--into-lib(c) exploits. http:\/\/www.phrack.org 2001."},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1145\/940071.940115"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1145\/1029894.1029911"}],"event":{"name":"PASTE07: PASTE '07 - ACM SIGPLAN-SIGSOFT Workshop on Program Analysis for Software Tools and Engineering","sponsor":["SIGPLAN ACM Special Interest Group on Programming Languages","ACM Association for Computing Machinery","SIGSOFT ACM Special Interest Group on Software Engineering"],"location":"San Diego California USA","acronym":"PASTE07"},"container-title":["Proceedings of the 7th ACM SIGPLAN-SIGSOFT workshop on Program analysis for software tools and engineering"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1251535.1251546","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1251535.1251546","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T14:47:48Z","timestamp":1750258068000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1251535.1251546"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2007,6,13]]},"references-count":24,"alternative-id":["10.1145\/1251535.1251546","10.1145\/1251535"],"URL":"https:\/\/doi.org\/10.1145\/1251535.1251546","relation":{},"subject":[],"published":{"date-parts":[[2007,6,13]]},"assertion":[{"value":"2007-06-13","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}