Matches in SemOpenAlex for { <https://semopenalex.org/work/W54585183> ?p ?o ?g. }
- W54585183 endingPage "143" @default.
- W54585183 startingPage "122" @default.
- W54585183 abstract "Dynamic loading of software components is a commonly used mechanism to achieve better flexibility and modularity in software. For an application’s runtime safety, it is important for the application to load only its intended components. However, programming mistakes may lead to failures to load a component, or even worse, to load a malicious component. Recent work has shown that these errors are both prevalent and severe, sometimes leading to remote code execution attacks. The work is based on dynamic analysis by monitoring and analyzing runtime component loadings. Although simple and effective in detecting real errors, it suffers from limited code coverage and may miss important vulnerabilities. Thus, it is desirable to develop effective techniques to detect all possible unsafe component loadings. This paper presents the first static binary analysis aiming at detecting all possible loading-related errors. The key challenge is how to scalably and precisely compute what components may be loaded at relevant program locations. Our main insight is that this information is often determined locally from the component loading call sites. This motivates us to design a demand-driven analysis, working backward starting from the relevant call sites. In particular, for a given call site c, we first compute its context-sensitive executable slices, one for each execution context. Then we emulate the slices to obtain the set of components possibly loaded at c. This novel combination of slicing and emulation achieves good scalability and precision by avoiding expensive symbolic analysis. We implemented our technique and evaluated its effectiveness against the existing dynamic technique on nine popular Windows applications. Results show that our tool has better coverage and is precise—it is able to detect many more unsafe loadings. It is also scalable and finishes analyzing all nine applications within minutes." @default.
- W54585183 created "2016-06-24" @default.
- W54585183 creator A5077610917 @default.
- W54585183 creator A5086152499 @default.
- W54585183 date "2012-01-01" @default.
- W54585183 modified "2023-10-14" @default.
- W54585183 title "Static Detection of Unsafe Component Loadings" @default.
- W54585183 cites W1484019856 @default.
- W54585183 cites W1487950530 @default.
- W54585183 cites W1582456956 @default.
- W54585183 cites W1986347924 @default.
- W54585183 cites W2007121005 @default.
- W54585183 cites W2080973181 @default.
- W54585183 cites W2088140535 @default.
- W54585183 cites W2092483417 @default.
- W54585183 cites W2098645109 @default.
- W54585183 cites W2101512909 @default.
- W54585183 cites W2107576540 @default.
- W54585183 cites W2119251836 @default.
- W54585183 cites W2138788987 @default.
- W54585183 cites W2144344516 @default.
- W54585183 cites W2160637255 @default.
- W54585183 cites W2171248081 @default.
- W54585183 cites W22973579 @default.
- W54585183 doi "https://doi.org/10.1007/978-3-642-28652-0_7" @default.
- W54585183 hasPublicationYear "2012" @default.
- W54585183 type Work @default.
- W54585183 sameAs 54585183 @default.
- W54585183 citedByCount "7" @default.
- W54585183 countsByYear W545851832013 @default.
- W54585183 countsByYear W545851832014 @default.
- W54585183 countsByYear W545851832015 @default.
- W54585183 countsByYear W545851832016 @default.
- W54585183 crossrefType "book-chapter" @default.
- W54585183 hasAuthorship W54585183A5077610917 @default.
- W54585183 hasAuthorship W54585183A5086152499 @default.
- W54585183 hasBestOaLocation W545851831 @default.
- W54585183 hasConcept C105795698 @default.
- W54585183 hasConcept C111919701 @default.
- W54585183 hasConcept C120314980 @default.
- W54585183 hasConcept C121332964 @default.
- W54585183 hasConcept C149635348 @default.
- W54585183 hasConcept C149810388 @default.
- W54585183 hasConcept C151730666 @default.
- W54585183 hasConcept C160145156 @default.
- W54585183 hasConcept C162324750 @default.
- W54585183 hasConcept C168167062 @default.
- W54585183 hasConcept C177264268 @default.
- W54585183 hasConcept C199360897 @default.
- W54585183 hasConcept C2777904410 @default.
- W54585183 hasConcept C2779343474 @default.
- W54585183 hasConcept C2779478453 @default.
- W54585183 hasConcept C2779639559 @default.
- W54585183 hasConcept C2780598303 @default.
- W54585183 hasConcept C33923547 @default.
- W54585183 hasConcept C41008148 @default.
- W54585183 hasConcept C48044578 @default.
- W54585183 hasConcept C50522688 @default.
- W54585183 hasConcept C54355233 @default.
- W54585183 hasConcept C79403827 @default.
- W54585183 hasConcept C86803240 @default.
- W54585183 hasConcept C91071405 @default.
- W54585183 hasConcept C97355855 @default.
- W54585183 hasConcept C97686452 @default.
- W54585183 hasConceptScore W54585183C105795698 @default.
- W54585183 hasConceptScore W54585183C111919701 @default.
- W54585183 hasConceptScore W54585183C120314980 @default.
- W54585183 hasConceptScore W54585183C121332964 @default.
- W54585183 hasConceptScore W54585183C149635348 @default.
- W54585183 hasConceptScore W54585183C149810388 @default.
- W54585183 hasConceptScore W54585183C151730666 @default.
- W54585183 hasConceptScore W54585183C160145156 @default.
- W54585183 hasConceptScore W54585183C162324750 @default.
- W54585183 hasConceptScore W54585183C168167062 @default.
- W54585183 hasConceptScore W54585183C177264268 @default.
- W54585183 hasConceptScore W54585183C199360897 @default.
- W54585183 hasConceptScore W54585183C2777904410 @default.
- W54585183 hasConceptScore W54585183C2779343474 @default.
- W54585183 hasConceptScore W54585183C2779478453 @default.
- W54585183 hasConceptScore W54585183C2779639559 @default.
- W54585183 hasConceptScore W54585183C2780598303 @default.
- W54585183 hasConceptScore W54585183C33923547 @default.
- W54585183 hasConceptScore W54585183C41008148 @default.
- W54585183 hasConceptScore W54585183C48044578 @default.
- W54585183 hasConceptScore W54585183C50522688 @default.
- W54585183 hasConceptScore W54585183C54355233 @default.
- W54585183 hasConceptScore W54585183C79403827 @default.
- W54585183 hasConceptScore W54585183C86803240 @default.
- W54585183 hasConceptScore W54585183C91071405 @default.
- W54585183 hasConceptScore W54585183C97355855 @default.
- W54585183 hasConceptScore W54585183C97686452 @default.
- W54585183 hasLocation W545851831 @default.
- W54585183 hasOpenAccess W54585183 @default.
- W54585183 hasPrimaryLocation W545851831 @default.
- W54585183 hasRelatedWork W1533964197 @default.
- W54585183 hasRelatedWork W157156687 @default.
- W54585183 hasRelatedWork W1995407414 @default.
- W54585183 hasRelatedWork W2364921833 @default.