UAFSan: an object-identifier-based dynamic approach for detecting use-after-free vulnerabilities

B Gui, W Song, J Huang - Proceedings of the 30th ACM SIGSOFT …, 2021 - dl.acm.org
Use-After-Free (UAF) vulnerabilities constitute severe threats to software security. In contrast
to other memory errors, UAFs are more difficult to detect through manual or static analysis …

Contemporary COBOL: Developers' perspectives on defects and defect location

A Ciborowska, A Chakarov… - 2021 IEEE International …, 2021 - ieeexplore.ieee.org
Mainframe systems are facing a critical shortage of developer workforce as the current
generation of COBOL developers retires. Furthermore, due to the limited availability of public …

{COMRace}: detecting data race vulnerabilities in {COM} objects

F Gu, Q Guo, L Li, Z Peng, W Lin, X Yang… - 31st USENIX Security …, 2022 - usenix.org
The Microsoft Component Object Model (COM) is the foundation for many key Microsoft
technologies and we develop COMRace, the first data race vulnerability detection tool for …

Semantic web Racer: Dynamic security testing of the web application against race condition in the business layer

M Alidoosti, A Nowroozi, A Nickabadi - Expert Systems with Applications, 2022 - Elsevier
The parallel execution of multiple threads of a web application will cause races if the web
application is not synchronized correctly. Detecting the race condition in web applications …

Reorder Pointer Flow in Sound Concurrency Bug Prediction

Y Guo, S Zhu, Y Cai, L He, J Zhang - Proceedings of the 46th IEEE/ACM …, 2024 - dl.acm.org
Due to the non-determinism of thread interleaving, predicting concurrency bugs has long
been an extremely difficult task. Recently, several sound bug-detecting approaches were …

Raproducer: Efficiently diagnose and reproduce data race bugs for binaries via trace analysis

M Yuan, Y Lee, C Zhang, Y Li, Y Cai… - Proceedings of the 30th …, 2021 - dl.acm.org
A growing number of bugs have been reported by vulnerability discovery solutions. Among
them, some bugs are hard to diagnose or reproduce, including data race bugs caused by …