{"id":"https://openalex.org/W243537476","doi":null,"title":"Evaluating Static Analysis Tools for Detecting Buffer Overflows in C Code","display_name":"Evaluating Static Analysis Tools for Detecting Buffer Overflows in C Code","publication_year":2005,"publication_date":"2005-05-01","ids":{"openalex":"https://openalex.org/W243537476","mag":"243537476"},"language":"en","primary_location":{"id":"mag:243537476","doi":null,"is_oa":false,"landing_page_url":"https://apps.dtic.mil/sti/pdfs/ADA511392.pdf","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":null},"volume":null,"type":"article","is_traditional":true,"indexed_in":[],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5084132285","display_name":"Kendra Kratkiewicz","orcid":"https://orcid.org/0009-0008-0072-6000","observed_orcids":["https://orcid.org/0009-0008-0072-6000"]},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Kendra Kratkiewicz","raw_affiliation_strings":[],"raw_orcid":"https://orcid.org/0009-0008-0072-6000","affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":["https://openalex.org/A5084132285"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":5.1929,"has_fulltext":false,"cited_by_count":45,"citation_normalized_percentile":{"value":0.94805468,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":87,"max":98},"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.573199987411499,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.573199987411499,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.36739999055862427,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10126","display_name":"Logic, programming, and type systems","score":0.014999999664723873,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/buffer-overflow-detection","display_name":"buffer overflow detection","score":0.9290000200271606},{"id":"https://openalex.org/keywords/static-analysis-tools","display_name":"static analysis tools","score":0.9729999899864197},{"id":"https://openalex.org/keywords/c-code","display_name":"C code","score":0.8009999990463257},{"id":"https://openalex.org/keywords/archers","display_name":"archers","score":0.9769999980926514},{"id":"https://openalex.org/keywords/splints","display_name":"splints","score":0.9850000143051147},{"id":"https://openalex.org/keywords/uno","display_name":"UNO","score":0.9779999852180481},{"id":"https://openalex.org/keywords/boon","display_name":"Boon","score":0.9950000047683716},{"id":"https://openalex.org/keywords/false-alarm-rate","display_name":"false alarm rate","score":0.8889999985694885},{"id":"https://openalex.org/keywords/detection-rate","display_name":"detection rate","score":0.6610000133514404},{"id":"https://openalex.org/keywords/interprocedural-analysis","display_name":"interprocedural analysis","score":0.8159999847412109},{"id":"https://openalex.org/keywords/c-library-functions","display_name":"C library functions","score":0.9710000157356262}],"concepts":[{"id":"https://openalex.org/C40842320","wikidata":"https://www.wikidata.org/wiki/Q19423","display_name":"Buffer overflow","level":2,"score":0.7609172463417053},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7485103011131287},{"id":"https://openalex.org/C77052588","wikidata":"https://www.wikidata.org/wiki/Q644307","display_name":"Constant false alarm rate","level":2,"score":0.7027434706687927},{"id":"https://openalex.org/C79581498","wikidata":"https://www.wikidata.org/wiki/Q1367530","display_name":"Suite","level":2,"score":0.6656166911125183},{"id":"https://openalex.org/C151552104","wikidata":"https://www.wikidata.org/wiki/Q7705809","display_name":"Test suite","level":4,"score":0.6011114120483398},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.5269169211387634},{"id":"https://openalex.org/C2776836416","wikidata":"https://www.wikidata.org/wiki/Q1364844","display_name":"False alarm","level":2,"score":0.524928867816925},{"id":"https://openalex.org/C95922358","wikidata":"https://www.wikidata.org/wiki/Q5432725","display_name":"False positive rate","level":2,"score":0.5076826810836792},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.4400058388710022},{"id":"https://openalex.org/C2779119184","wikidata":"https://www.wikidata.org/wiki/Q294350","display_name":"ALARM","level":2,"score":0.41691094636917114},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.4128422141075134},{"id":"https://openalex.org/C200601418","wikidata":"https://www.wikidata.org/wiki/Q2193887","display_name":"Reliability engineering","level":1,"score":0.32661953568458557},{"id":"https://openalex.org/C128942645","wikidata":"https://www.wikidata.org/wiki/Q1568346","display_name":"Test case","level":3,"score":0.31898465752601624},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.27086806297302246},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.22778961062431335},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.2066323459148407},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.16303780674934387},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.130420982837677},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.08571362495422363},{"id":"https://openalex.org/C152877465","wikidata":"https://www.wikidata.org/wiki/Q208042","display_name":"Regression analysis","level":2,"score":0.0},{"id":"https://openalex.org/C146978453","wikidata":"https://www.wikidata.org/wiki/Q3798668","display_name":"Aerospace engineering","level":1,"score":0.0},{"id":"https://openalex.org/C166957645","wikidata":"https://www.wikidata.org/wiki/Q23498","display_name":"Archaeology","level":1,"score":0.0},{"id":"https://openalex.org/C95457728","wikidata":"https://www.wikidata.org/wiki/Q309","display_name":"History","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"mag:243537476","doi":null,"is_oa":false,"landing_page_url":"https://apps.dtic.mil/sti/pdfs/ADA511392.pdf","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":null}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":15,"referenced_works":["https://openalex.org/W60370665","https://openalex.org/W146286300","https://openalex.org/W1535713556","https://openalex.org/W1562658564","https://openalex.org/W1579850852","https://openalex.org/W1839576640","https://openalex.org/W1974909417","https://openalex.org/W2019448108","https://openalex.org/W2020841721","https://openalex.org/W2084974764","https://openalex.org/W2102440514","https://openalex.org/W2120138937","https://openalex.org/W2137726309","https://openalex.org/W2138538192","https://openalex.org/W2146455667"],"related_works":["https://openalex.org/W342953713","https://openalex.org/W3016326598","https://openalex.org/W7097431391","https://openalex.org/W7099538026","https://openalex.org/W1604819730","https://openalex.org/W7095410026","https://openalex.org/W2841401134","https://openalex.org/W2167231283","https://openalex.org/W7099469910","https://openalex.org/W1649260624"],"abstract_inverted_index":{"Abstract":[0],":":[1],"This":[2],"project":[3,223],"evaluated":[4],"five":[5],"static":[6],"analysis":[7,106,248],"tools":[8,249],"using":[9],"a":[10,22,45,59,97,153,165,191,226,232],"diagnostic":[11],"test":[12,52,180,212,233],"suite":[13,234],"to":[14,171,189,220,245,252],"determine":[15],"their":[16],"strengths":[17],"and":[18,34,73,85,107,118,131,143,236],"weaknesses":[19],"in":[20,28,103,139,145,178,186],"detecting":[21],"variety":[23,167],"of":[24,58,70,109,168,174,201,211],"buffer":[25,227,253],"overflow":[26,228,254],"flaws":[27],"C":[29,82,110],"code.":[30,125],"Detection,":[31],"false":[32,77,94,135,147,161],"alarm,":[33],"confusion":[35],"rates":[36],"were":[37],"measured,":[38],"along":[39,230],"with":[40,92,231,250],"execution":[41,86],"time.":[42,87],"PolySpace":[43],"demonstrated":[44],"superior":[46],"detection":[47,116],"rate":[48,79,117,149],"on":[49,123,208],"the":[50,133,175,179,199,202,209],"basic":[51],"suite,":[53],"missing":[54],"only":[55],"one":[56],"out":[57],"possible":[60,176],"291":[61],"detections.":[62],"It":[63,182],"may":[64],"benefit":[65],"from":[66],"improving":[67],"its":[68,76,104,115,121,140,146],"treatment":[69],"signal":[71],"handlers,":[72],"reducing":[74],"both":[75],"alarm":[78,136,148],"(particularly":[80],"for":[81],"library":[83,111],"functions)":[84],"ARCHER":[88],"performed":[89],"quite":[90],"well":[91,207],"no":[93,160],"alarms":[95],"whatsoever;":[96],"few":[98],"key":[99],"enhancements,":[100],"such":[101],"as":[102],"inter-procedural":[105],"handling":[108],"functions,":[112],"would":[113,150,183],"boost":[114],"should":[119],"improve":[120],"performance":[122],"real-world":[124],"Splint":[126],"detected":[127],"significantly":[128],"fewer":[129],"overflows":[130,169],"exhibited":[132],"highest":[134],"rate.":[137],"Improvements":[138],"loop":[141],"handling,":[142],"reductions":[144],"make":[151],"it":[152,215],"much":[154],"more":[155],"useful":[156,193],"tool.":[157,194],"UNO":[158],"had":[159],"alarms,":[162],"but":[163],"missed":[164],"broad":[166],"amounting":[170],"nearly":[172],"half":[173],"detections":[177],"suite.":[181],"need":[184],"improvement":[185],"many":[187],"areas":[188],"become":[190],"very":[192],"BOON":[195],"was":[196],"clearly":[197],"at":[198],"back":[200],"pack,":[203],"not":[204],"even":[205],"performing":[206],"subset":[210],"cases":[213],"where":[214],"could":[216],"have":[217],"been":[218],"expected":[219],"function.":[221],"The":[222],"also":[224],"provides":[225],"taxonomy,":[229],"generator":[235],"other":[237],"tools,":[238],"that":[239],"can":[240],"be":[241],"used":[242],"by":[243],"others":[244],"evaluate":[246],"code":[247],"respect":[251],"detection.":[255]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":1},{"year":2019,"cited_by_count":2},{"year":2018,"cited_by_count":3},{"year":2017,"cited_by_count":3},{"year":2016,"cited_by_count":4},{"year":2015,"cited_by_count":2},{"year":2013,"cited_by_count":3},{"year":2012,"cited_by_count":5}],"updated_date":"2025-11-06T04:12:42.849631","created_date":"2016-06-24T00:00:00"}