{"id":"https://openalex.org/W2151309479","doi":"https://doi.org/10.1109/wcre.2003.1287263","title":"Using program transformation to secure C programs against buffer overflows","display_name":"Using program transformation to secure C programs against buffer overflows","publication_year":2004,"publication_date":"2004-07-08","ids":{"openalex":"https://openalex.org/W2151309479","doi":"https://doi.org/10.1109/wcre.2003.1287263","mag":"2151309479"},"language":"en","primary_location":{"id":"doi:10.1109/wcre.2003.1287263","is_oa":false,"landing_page_url":"https://doi.org/10.1109/wcre.2003.1287263","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"10th Working Conference on Reverse Engineering, 2003. WCRE 2003. Proceedings.","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5015296316","display_name":"Christine Dahn","orcid":"https://orcid.org/0000-0003-0609-176X"},"institutions":[{"id":"https://openalex.org/I72816309","display_name":"Drexel University","ror":"https://ror.org/04bdffz58","country_code":"US","type":"education","lineage":["https://openalex.org/I72816309"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"C. Dahn","raw_affiliation_strings":["Department of Computer Science, College of Engineering, Drexel University, Philadelphia, PA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, College of Engineering, Drexel University, Philadelphia, PA, USA","institution_ids":["https://openalex.org/I72816309"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5004087073","display_name":"Spiros Mancoridis","orcid":"https://orcid.org/0000-0001-6354-4281"},"institutions":[{"id":"https://openalex.org/I72816309","display_name":"Drexel University","ror":"https://ror.org/04bdffz58","country_code":"US","type":"education","lineage":["https://openalex.org/I72816309"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"S. Mancoridis","raw_affiliation_strings":["Department of Computer Science, College of Engineering, Drexel University, Philadelphia, PA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, College of Engineering, Drexel University, Philadelphia, PA, USA","institution_ids":["https://openalex.org/I72816309"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I72816309"],"apc_list":null,"apc_paid":null,"fwci":1.5436,"has_fulltext":false,"cited_by_count":39,"citation_normalized_percentile":{"value":0.83910959,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"323","last_page":"332"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9909999966621399,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/buffer-overflow","display_name":"Buffer overflow","score":0.9066121578216553},{"id":"https://openalex.org/keywords/heap","display_name":"Heap (data structure)","score":0.8886494636535645},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7699190378189087},{"id":"https://openalex.org/keywords/program-transformation","display_name":"Program transformation","score":0.5604901909828186},{"id":"https://openalex.org/keywords/control-flow","display_name":"Control flow","score":0.5374259352684021},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.4719107449054718},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.45995891094207764},{"id":"https://openalex.org/keywords/compiler","display_name":"Compiler","score":0.4113791882991791},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.39159929752349854},{"id":"https://openalex.org/keywords/parallel-computing","display_name":"Parallel computing","score":0.347023069858551},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.3368195593357086}],"concepts":[{"id":"https://openalex.org/C40842320","wikidata":"https://www.wikidata.org/wiki/Q19423","display_name":"Buffer overflow","level":2,"score":0.9066121578216553},{"id":"https://openalex.org/C134757568","wikidata":"https://www.wikidata.org/wiki/Q274089","display_name":"Heap (data structure)","level":2,"score":0.8886494636535645},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7699190378189087},{"id":"https://openalex.org/C2778361913","wikidata":"https://www.wikidata.org/wiki/Q7248437","display_name":"Program transformation","level":2,"score":0.5604901909828186},{"id":"https://openalex.org/C160191386","wikidata":"https://www.wikidata.org/wiki/Q868299","display_name":"Control flow","level":2,"score":0.5374259352684021},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.4719107449054718},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.45995891094207764},{"id":"https://openalex.org/C169590947","wikidata":"https://www.wikidata.org/wiki/Q47506","display_name":"Compiler","level":2,"score":0.4113791882991791},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.39159929752349854},{"id":"https://openalex.org/C173608175","wikidata":"https://www.wikidata.org/wiki/Q232661","display_name":"Parallel computing","level":1,"score":0.347023069858551},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.3368195593357086}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/wcre.2003.1287263","is_oa":false,"landing_page_url":"https://doi.org/10.1109/wcre.2003.1287263","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"10th Working Conference on Reverse Engineering, 2003. WCRE 2003. Proceedings.","raw_type":"proceedings-article"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.129.445","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.129.445","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://ieeexplore.ieee.org/iel5/9044/28697/01287263.pdf","raw_type":"text"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.133.7187","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.133.7187","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www.cs.drexel.edu/~spiros/papers/WCRE03a.pdf","raw_type":"text"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure","score":0.4699999988079071}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":19,"referenced_works":["https://openalex.org/W1499992849","https://openalex.org/W1517760837","https://openalex.org/W1528098570","https://openalex.org/W1542906860","https://openalex.org/W1655226010","https://openalex.org/W1989449504","https://openalex.org/W2067776455","https://openalex.org/W2088448861","https://openalex.org/W2115571575","https://openalex.org/W2120138937","https://openalex.org/W2145568266","https://openalex.org/W2158909123","https://openalex.org/W2160468841","https://openalex.org/W2611598995","https://openalex.org/W2978757628","https://openalex.org/W3174107850","https://openalex.org/W6629885503","https://openalex.org/W6632329290","https://openalex.org/W6768779726"],"related_works":["https://openalex.org/W1981237417","https://openalex.org/W3126155085","https://openalex.org/W2002128171","https://openalex.org/W2388448064","https://openalex.org/W2136651729","https://openalex.org/W3022539710","https://openalex.org/W2366097951","https://openalex.org/W2960453428","https://openalex.org/W2068046168","https://openalex.org/W2163072411"],"abstract_inverted_index":{"Buffer":[0],"overflows":[1,117],"are":[2,88,180],"the":[3,27,45,61,72,82,86,91,105,109,140,143,153,186],"most":[4,38],"common":[5,39,51],"source":[6],"of":[7,15,31,33,41,74,97,142,156,190],"security":[8],"vulnerabilities":[9],"in":[10,20],"C":[11],"programs.":[12],"This":[13,59,150],"class":[14],"vulnerability,":[16],"which":[17],"is":[18,44,50,169],"found":[19],"both":[21],"legacy":[22],"and":[23,176,188],"modern":[24],"software,":[25],"costs":[26],"software":[28],"industry":[29],"hundreds":[30],"millions":[32],"dollars":[34],"per":[35],"year.":[36],"The":[37,137],"type":[40],"buffer":[42,173],"overflow":[43,174],"runtime":[46],"stack":[47,56,129,157],"overflow.":[48],"It":[49],"because":[52],"programmers":[53],"often":[54],"use":[55],"allocated":[57,130,158,162],"arrays.":[58],"enables":[60],"attacker":[62],"to":[63,90,104,113,160,164,171,184],"change":[64],"a":[65,78,123,146,172],"program\u2019s":[66],"control":[67],"flow":[68],"by":[69],"writing":[70],"beyond":[71],"boundary":[73],"an":[75],"array":[76],"onto":[77],"return":[79],"address":[80],"on":[81],"run-time":[83],"stack.":[84],"If":[85],"arrays":[87,131,159],"repositioned":[89],"heap":[92,106,110,116,161],"at":[93,132],"compile":[94,133],"time,":[95],"none":[96],"these":[98],"attacks":[99],"succeed.":[100],"Furthermore,":[101],"repositioning":[102],"buffers":[103],"should":[107],"perturb":[108],"memory":[111],"enough":[112],"prevent":[114],"many":[115],"as":[118,182],"well.":[119],"We":[120],"have":[121],"created":[122],"tool":[124],"called":[125],"Gemini":[126],"that":[127,168],"repositions":[128],"time":[134],"using":[135],"TXL.":[136],"transformation":[138,155],"preserves":[139],"semantics":[141],"program":[144,167],"with":[145],"small":[147],"performance":[148],"penalty.":[149],"paper":[151],"discusses":[152],"semantics-preserving":[154],"\u201cpointers":[163],"arrays\u201d.":[165],"A":[166],"amenable":[170],"attack":[175],"several":[177],"Linux":[178],"programs":[179],"used":[181],"examples":[183],"demonstrate":[185],"effectiveness":[187],"overhead":[189],"our":[191],"technique.":[192],"1.":[193]},"counts_by_year":[{"year":2018,"cited_by_count":3},{"year":2017,"cited_by_count":1},{"year":2016,"cited_by_count":2},{"year":2015,"cited_by_count":2},{"year":2014,"cited_by_count":1},{"year":2013,"cited_by_count":2},{"year":2012,"cited_by_count":4}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}