@inproceedings{1790810984c24dea89c422b7795b353b,
title = "A model for security vulnerability pattern",
abstract = "Static analysis technology is used to find programming errors before run time. Unlike dynamic analysis technique which looks at the application state while it is being executed, static analysis technique does not require the application to be executed. In this paper, we classify security vulnerability patterns in source code and design a model to express various security vulnerability patterns by making use of pushdown automata. On the basis of the model, it is possible to find a security vulnerability by making use of Abstract Syntax Tree (AST) based pattern matching technique in parsing level.-",
keywords = "Abstract Syntax Tree (AST), Buffer overflow, Pushdown Automata (PDA), Software security, Static analysis",
author = "Hyungwoo Kang and Kibom Kim and Soonjwa Hong and Lee, {Dong Hoon}",
year = "2006",
doi = "10.1007/11751595_42",
language = "English",
isbn = "3540340750",
series = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",
publisher = "Springer Verlag",
pages = "385--394",
booktitle = "Computational Science and Its Applications - ICCSA 2006",
note = "ICCSA 2006: International Conference on Computational Science and Its Applications ; Conference date: 08-05-2006 Through 11-05-2006",
}