Memory safety bugs continue to be a major source of security vulnerabilities in our critical
infrastructure. The CHERI project has proposed extending conventional architectures with …

Lack of memory safety in C/C++ has resulted in numerous security vulnerabilities and
serious bugs in large software systems. This paper highlights the challenges in enforcing …

C is a dominant programming language for implementing system and low-level embedded
software. Unfortunately, the unsafe nature of its low-level control of memory often leads to …

Use-After-Free (UAF) vulnerabilities are caused by the program operating on a dangling
pointer and can be exploited to compromise critical software systems. While there have …

We present, VIP, an approach to boosting the precision of Virtual call Integrity Protection for
large-scale real-world C++ programs (eg, Chrome) by using pointer analysis for the first …

C is a dominant language for implementing system software. Unfortunately, its support for
low-level control of memory often leads to memory errors. Dynamic analysis tools, which …

C/C++ programs frequently encounter memory errors, such as Use-After-Free (UAF), buffer
overflow, and integer overflow. Among these memory errors, UAF vulnerabilities are …

Type confusion, or bad casting, is a common C++ attack vector. Such vulnerabilities cause a
program to interpret an object as belonging to a different type, enabling powerful attacks, like …

With tons of efforts spent on its mitigation, Cross-site scripting (XSS) remains one of the most
prevalent security threats on the internet. Decades of exploitation and remediation …

Programming tasks provide an opportunity for students to improve their problem-solving
skills (PSS). However, when programming tasks are challenging, students could become …