{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,18]],"date-time":"2026-05-18T10:13:47Z","timestamp":1779099227340,"version":"3.51.4"},"publisher-location":"New York, NY, USA","reference-count":47,"publisher":"ACM","license":[{"start":{"date-parts":[[2018,9,3]],"date-time":"2018-09-03T00:00:00Z","timestamp":1535932800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2018,9,3]]},"DOI":"10.1145\/3238147.3238159","type":"proceedings-article","created":{"date-parts":[[2018,8,20]],"date-time":"2018-08-20T20:04:36Z","timestamp":1534795476000},"page":"225-235","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":41,"title":["ReScue: crafting regular expression DoS attacks"],"prefix":"10.1145","author":[{"given":"Yuju","family":"Shen","sequence":"first","affiliation":[{"name":"Nanjing University, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yanyan","family":"Jiang","sequence":"additional","affiliation":[{"name":"Nanjing University, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Chang","family":"Xu","sequence":"additional","affiliation":[{"name":"Nanjing University, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ping","family":"Yu","sequence":"additional","affiliation":[{"name":"Nanjing University, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xiaoxing","family":"Ma","sequence":"additional","affiliation":[{"name":"Nanjing University, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jian","family":"Lu","sequence":"additional","affiliation":[{"name":"Nanjing University, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2018,9,3]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2007.128"},{"key":"e_1_3_2_1_2_1","unstructured":"1109\/INFCOM.2007.128  1109\/INFCOM.2007.128"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-30045-5_11"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.4204\/EPTCS.151.7"},{"key":"e_1_3_2_1_5_1","volume-title":"On the semantics of regular expression parsing in the wild. Theoretical Computer Science 679 (May","author":"Berglund Martin","year":"2017","unstructured":"Martin Berglund and Brink van der Merwe . 2017. On the semantics of regular expression parsing in the wild. Theoretical Computer Science 679 (May 2017 ), 69\u201382. Martin Berglund and Brink van der Merwe. 2017. On the semantics of regular expression parsing in the wild. Theoretical Computer Science 679 (May 2017), 69\u201382."},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1016\/0304-3975(93)90287-4"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1142\/S012905410300214X"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/2931037.2931073"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1109\/TIT.1956.1056813"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1049\/ip-sen:20030559"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1145\/3071178.3071196"},{"key":"e_1_3_2_1_12_1","unstructured":"Erik Corry Christian P Hansen and Lasse R H Nielsen. 2009. Irregexp Google Chrome\u2019s New Regexp Implementation. https:\/\/blog.chromium.org\/2009\/02\/ irregexp-google-chromes-new-regexp.html  Erik Corry Christian P Hansen and Lasse R H Nielsen. 2009. Irregexp Google Chrome\u2019s New Regexp Implementation. https:\/\/blog.chromium.org\/2009\/02\/ irregexp-google-chromes-new-regexp.html"},{"key":"e_1_3_2_1_14_1","volume-title":"Proceedings of the 12th USENIX Security Symposium (USENIX Security \u201903)","author":"Crosby Scott A","year":"2003","unstructured":"Scott A Crosby and Dan S Wallach . 2003 . Denial of Service via Algorithmic Complexity Attacks . In Proceedings of the 12th USENIX Security Symposium (USENIX Security \u201903) . 29\u201344. https:\/\/dl.acm.org\/citation.cfm?id=1251356 Scott A Crosby and Dan S Wallach. 2003. Denial of Service via Algorithmic Complexity Attacks. In Proceedings of the 12th USENIX Security Symposium (USENIX Security \u201903). 29\u201344. https:\/\/dl.acm.org\/citation.cfm?id=1251356"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1016\/S0164-1212(02)00062-6"},{"key":"e_1_3_2_1_16_1","unstructured":"Python Software Foundation. 2018. regex (PyPI). https:\/\/pypi.org\/project\/regex\/  Python Software Foundation. 2018. regex (PyPI). https:\/\/pypi.org\/project\/regex\/"},{"key":"e_1_3_2_1_17_1","volume-title":"Mastering Regular Expressions: Understand Your Data and Be More Productive","author":"Friedl Jeffrey E F","unstructured":"Jeffrey E F Friedl . 2006. Mastering Regular Expressions: Understand Your Data and Be More Productive ( 3 th ed.). Jeffrey E F Friedl. 2006. Mastering Regular Expressions: Understand Your Data and Be More Productive (3th ed.).","edition":"3"},{"key":"e_1_3_2_1_18_1","volume-title":"Proceedings of the 16th Annual Network and Distributed System Security Symposium (NDSS \u201908). 151\u2013166. http:\/\/www.isoc.org\/isoc\/ conferences\/ndss\/08\/papers\/10_automated_whitebox_fuzz.pdf","author":"Godefroid Patrice","year":"2008","unstructured":"Patrice Godefroid , Michael Y Levin , David A Molnar , 2008 . Automated whitebox fuzz testing . In Proceedings of the 16th Annual Network and Distributed System Security Symposium (NDSS \u201908). 151\u2013166. http:\/\/www.isoc.org\/isoc\/ conferences\/ndss\/08\/papers\/10_automated_whitebox_fuzz.pdf Patrice Godefroid, Michael Y Levin, David A Molnar, et al. 2008. Automated whitebox fuzz testing. In Proceedings of the 16th Annual Network and Distributed System Security Symposium (NDSS \u201908). 151\u2013166. http:\/\/www.isoc.org\/isoc\/ conferences\/ndss\/08\/papers\/10_automated_whitebox_fuzz.pdf"},{"key":"e_1_3_2_1_19_1","unstructured":"Jan Goyvaerts. 2018. Popular Tools Utilities and Programming Languages That Support Regular Expressions. https:\/\/www.regular-expressions.info\/tools.html  Jan Goyvaerts. 2018. Popular Tools Utilities and Programming Languages That Support Regular Expressions. https:\/\/www.regular-expressions.info\/tools.html"},{"key":"e_1_3_2_1_20_1","unstructured":"Jan Goyvaerts. 2018. Runaway Regular Expressions: Catastrophic Backtracking. https:\/\/www.regular-expressions.info\/catastrophic.html  Jan Goyvaerts. 2018. Runaway Regular Expressions: Catastrophic Backtracking. https:\/\/www.regular-expressions.info\/catastrophic.html"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1016\/S0950-5849(01)00189-6"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/2379776.2379787"},{"key":"e_1_3_2_1_23_1","unstructured":"Philip Hazel. 2017. Backtracking Limit of PCRE Match. http:\/\/www.pcre.org\/ current\/doc\/html\/pcre2api.html  Philip Hazel. 2017. Backtracking Limit of PCRE Match. http:\/\/www.pcre.org\/ current\/doc\/html\/pcre2api.html"},{"key":"e_1_3_2_1_24_1","volume-title":"Introduction to Automata Theory, Languages, and Computation","author":"Hopcroft John E","unstructured":"John E Hopcroft , Rajeev Motwani , and Jeffrey D Ullman . 2006. Introduction to Automata Theory, Languages, and Computation ( 3 rd ed.). John E Hopcroft, Rajeev Motwani, and Jeffrey D Ullman. 2006. Introduction to Automata Theory, Languages, and Computation (3rd ed.).","edition":"3"},{"key":"e_1_3_2_1_25_1","first-page":"12","article-title":"A comparative study of white box, black box and grey box testing techniques","volume":"3","author":"Khan Mohd Ehmer","year":"2012","unstructured":"Mohd Ehmer Khan , Farmeena Khan , 2012 . A comparative study of white box, black box and grey box testing techniques . International Journal of Advanced Computer Science and Applications 3 , 6 (2012), 12 \u2013 15 . ijacsa.2012.030603 Mohd Ehmer Khan, Farmeena Khan, et al. 2012. A comparative study of white box, black box and grey box testing techniques. International Journal of Advanced Computer Science and Applications 3, 6 (2012), 12\u201315. ijacsa.2012.030603","journal-title":"International Journal of Advanced Computer Science and Applications"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-38631-2_11"},{"key":"e_1_3_2_1_28_1","unstructured":"Andrew M Kuchling. 2018. Regular Expression How-To. https:\/\/docs.python. org\/3\/howto\/regex.html  Andrew M Kuchling. 2018. Regular Expression How-To. https:\/\/docs.python. org\/3\/howto\/regex.html"},{"key":"e_1_3_2_1_29_1","volume-title":"Proceedings of the 2011 IEEE Global Telecommunications Conference (GLOBECOM \u201911)","author":"Lin Cheng-Hung","year":"2011","unstructured":"Cheng-Hung Lin , Chen-Hsiung Liu , and Shih-Chieh Chang . 2011 . Accelerating regular expression matching using hierarchical parallel machines on GPU . In Proceedings of the 2011 IEEE Global Telecommunications Conference (GLOBECOM \u201911) . IEEE, 1\u20135. Cheng-Hung Lin, Chen-Hsiung Liu, and Shih-Chieh Chang. 2011. Accelerating regular expression matching using hierarchical parallel machines on GPU. In Proceedings of the 2011 IEEE Global Telecommunications Conference (GLOBECOM \u201911). IEEE, 1\u20135."},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.5555\/1077276.1077279"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2007.37"},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134073"},{"key":"e_1_3_2_1_33_1","unstructured":"3134073  3134073"},{"key":"e_1_3_2_1_34_1","unstructured":"LLVM Project. 2018. libFuzzer: A library for coverage-guided fuzz testing. https: \/\/llvm.org\/docs\/LibFuzzer.html  LLVM Project. 2018. libFuzzer: A library for coverage-guided fuzz testing. https: \/\/llvm.org\/docs\/LibFuzzer.html"},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1147\/rd.32.0114"},{"key":"e_1_3_2_1_37_1","unstructured":"Asiri Rathnayake and Hayo Thielecke. 2014. Static analysis for regular expression exponential runtime via substructural logics. (2014). arXiv: arXiv:1405.7058  Asiri Rathnayake and Hayo Thielecke. 2014. Static analysis for regular expression exponential runtime via substructural logics. (2014). arXiv: arXiv:1405.7058"},{"key":"e_1_3_2_1_38_1","unstructured":"Juraj Hajduch (SK). 2007. RegExLib: A regular expression library. http:\/\/www. regexlib.com\/REDetails.aspx?regexp_id=2598  Juraj Hajduch (SK). 2007. RegExLib: A regular expression library. http:\/\/www. regexlib.com\/REDetails.aspx?regexp_id=2598"},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2006.17"},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2017.27"},{"key":"e_1_3_2_1_41_1","first-page":"4","article-title":"Application of genetic algorithm in software testing","volume":"3","author":"Srivastava Praveen Ranjan","year":"2009","unstructured":"Praveen Ranjan Srivastava and Tai-hoon Kim. 2009 . Application of genetic algorithm in software testing . International Journal of Software Engineering and Its Applications 3 , 4 (Oct. 2009), 87\u201396. Praveen Ranjan Srivastava and Tai-hoon Kim. 2009. Application of genetic algorithm in software testing. International Journal of Software Engineering and Its Applications 3, 4 (Oct. 2009), 87\u201396.","journal-title":"International Journal of Software Engineering and Its Applications"},{"key":"e_1_3_2_1_42_1","volume-title":"27th USENIX Security Symposium (USENIX Security \u201918)","author":"Staicu Cristian-Alexandru","year":"2018","unstructured":"Cristian-Alexandru Staicu and Michael Pradel . 2018 . Freezing the web: A study of redos vulnerabilities in javascript-based web servers . In 27th USENIX Security Symposium (USENIX Security \u201918) . Cristian-Alexandru Staicu and Michael Pradel. 2018. Freezing the web: A study of redos vulnerabilities in javascript-based web servers. In 27th USENIX Security Symposium (USENIX Security \u201918)."},{"key":"e_1_3_2_1_43_1","volume-title":"Checking time linearity of regular expression matching based on backtracking. IPSJ Online Transactions 7 (Nov","author":"Sugiyama Satoshi","year":"2014","unstructured":"Satoshi Sugiyama and Yasuhiko Minamide . 2014. Checking time linearity of regular expression matching based on backtracking. IPSJ Online Transactions 7 (Nov . 2014 ), 82\u201392. Satoshi Sugiyama and Yasuhiko Minamide. 2014. Checking time linearity of regular expression matching based on backtracking. IPSJ Online Transactions 7 (Nov. 2014), 82\u201392."},{"key":"e_1_3_2_1_44_1","volume-title":"New Tool: SDL Regex Fuzzer. https:\/\/cloudblogs.microsoft. com\/microsoftsecure\/2010\/10\/12\/new-tool-sdl-regex-fuzzer","author":"Sullivan Bryan","year":"2010","unstructured":"Bryan Sullivan . 2010 . New Tool: SDL Regex Fuzzer. https:\/\/cloudblogs.microsoft. com\/microsoftsecure\/2010\/10\/12\/new-tool-sdl-regex-fuzzer Bryan Sullivan. 2010. New Tool: SDL Regex Fuzzer. https:\/\/cloudblogs.microsoft. com\/microsoftsecure\/2010\/10\/12\/new-tool-sdl-regex-fuzzer"},{"key":"e_1_3_2_1_45_1","unstructured":"Bryan Sullivan. 2010. Regular Expression Denial of Service Attacks and Defenses. https:\/\/msdn.microsoft.com\/en-us\/magazine\/ff646973.aspx  Bryan Sullivan. 2010. Regular Expression Denial of Service Attacks and Defenses. https:\/\/msdn.microsoft.com\/en-us\/magazine\/ff646973.aspx"},{"key":"e_1_3_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1145\/363347.363387"},{"key":"e_1_3_2_1_47_1","volume-title":"Proceedings of the International Conference on Implementation and Application of Automata (CIAA \u201916)","author":"Weideman Nicolaas","unstructured":"Nicolaas Weideman , Brink van der Merwe, Martin Berglund, and Bruce Watson. 2016. Analyzing matching time behavior of backtracking regular expression matchers by using ambiguity of NFA . In Proceedings of the International Conference on Implementation and Application of Automata (CIAA \u201916) . 322\u2013334. Nicolaas Weideman, Brink van der Merwe, Martin Berglund, and Bruce Watson. 2016. Analyzing matching time behavior of backtracking regular expression matchers by using ambiguity of NFA. In Proceedings of the International Conference on Implementation and Application of Automata (CIAA \u201916). 322\u2013334."},{"key":"e_1_3_2_1_48_1","unstructured":"Adar Weidman. 2017. Regular Expression Denial of Service - ReDoS. https: \/\/www.owasp.org\/index.php\/Regular_expression_Denial_of_Service_-_ReDoS  Adar Weidman. 2017. Regular Expression Denial of Service - ReDoS. https: \/\/www.owasp.org\/index.php\/Regular_expression_Denial_of_Service_-_ReDoS"},{"key":"e_1_3_2_1_49_1","doi-asserted-by":"publisher","DOI":"10.1007\/BF00175354"},{"key":"e_1_3_2_1_50_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-54580-5_1"}],"event":{"name":"ASE '18: 33rd ACM\/IEEE International Conference on Automated Software Engineering","location":"Montpellier France","acronym":"ASE '18","sponsor":["SIGAI ACM Special Interest Group on Artificial Intelligence","CNRS Centre National De La Rechercue Scientifique","SIGSOFT ACM Special Interest Group on Software Engineering","IEEE-CS Computer Society"]},"container-title":["Proceedings of the 33rd ACM\/IEEE International Conference on Automated Software Engineering"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3238147.3238159","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3238147.3238159","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T01:39:35Z","timestamp":1750210775000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3238147.3238159"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2018,9,3]]},"references-count":47,"alternative-id":["10.1145\/3238147.3238159","10.1145\/3238147"],"URL":"https:\/\/doi.org\/10.1145\/3238147.3238159","relation":{},"subject":[],"published":{"date-parts":[[2018,9,3]]},"assertion":[{"value":"2018-09-03","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}