Buffer overflow vulnerabilities are among the most widespread of security problems.
Numerous incidents of buffer overflow attacks have been reported and many solutions have …

We describe a new, general approach for safeguarding systems against any type of code-
injection attack. We apply Kerckhoff's principle, by creating process-specific randomized …

Attacks which exploit memory programming errors (such as buffer overflows) are one of
today's most serious security threats. These attacks require an attacker to have an in-depth …

Despite numerous security technologies crafted to resist buffer overflow vulnerabilities,
buffer overflows continue to be the dominant form of software security vulnerability. This is …

To understand the threat posed by computer worms, it is necessary to understand the
classes of worms, the attackers who may employ them, and the potential payloads. This …

This contribution proposes a set of criteria that distinguish a grand challenge in science or
engineering from the many other kinds of short-term or long-term research problems that …

The size and complexity of software systems is growing, increasing the number of bugs.
Many of these bugs constitute security vulnerabilities. Most common of these bugs is the …

Distinguishing non-null references from possibly-null references at the type level can detect
null-related errors in object-oriented programs at compile-time. This paper gives a proposal …

CCured is a program transformation system that adds memory safety guarantees to C
programs by verifying statically that memory errors cannot occur and by inserting run-time …

We present Scriptroute, a system that allows ordinary Internet users to conduct network
measurements from remote vantage points. We seek to combine the flexibility found in …