{"id":"https://openalex.org/W2903188055","doi":"https://doi.org/10.1587/transinf.2018edp7192","title":"Automatic Prevention of Buffer Overflow Vulnerability Using Candidate Code Generation","display_name":"Automatic Prevention of Buffer Overflow Vulnerability Using Candidate Code Generation","publication_year":2018,"publication_date":"2018-11-30","ids":{"openalex":"https://openalex.org/W2903188055","doi":"https://doi.org/10.1587/transinf.2018edp7192","mag":"2903188055"},"language":"en","primary_location":{"id":"doi:10.1587/transinf.2018edp7192","is_oa":true,"landing_page_url":"https://doi.org/10.1587/transinf.2018edp7192","pdf_url":null,"source":{"id":"https://openalex.org/S2486202937","display_name":"IEICE Transactions on Information and Systems","issn_l":"0916-8532","issn":["0916-8532","1745-1361"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4320800604","host_organization_name":"Institute of Electronics, Information and Communication Engineers","host_organization_lineage":["https://openalex.org/P4320800604"],"host_organization_lineage_names":["Institute of Electronics, Information and Communication Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEICE Transactions on Information and Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://doi.org/10.1587/transinf.2018edp7192","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5112401642","display_name":"Young-Su JANG","orcid":null},"institutions":[{"id":"https://openalex.org/I1322422313","display_name":"Tech University of Korea","ror":"https://ror.org/0060vt104","country_code":"KR","type":"education","lineage":["https://openalex.org/I1322422313"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Young-Su JANG","raw_affiliation_strings":["Korea Polytechnics"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Korea Polytechnics","institution_ids":["https://openalex.org/I1322422313"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5030380431","display_name":"Jin\u2010Young Choi","orcid":"https://orcid.org/0000-0002-8100-7583"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jin-Young CHOI","raw_affiliation_strings":["Korea University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Korea University","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.4914,"has_fulltext":false,"cited_by_count":5,"citation_normalized_percentile":{"value":0.74157699,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":"E101.D","issue":"12","first_page":"3005","last_page":"3018"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9977999925613403,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/buffer-overflow","display_name":"Buffer overflow","score":0.9440793991088867},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.856999397277832},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.7236206531524658},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.6428159475326538},{"id":"https://openalex.org/keywords/secure-coding","display_name":"Secure coding","score":0.6252607107162476},{"id":"https://openalex.org/keywords/source-code","display_name":"Source code","score":0.6137261390686035},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.5482540130615234},{"id":"https://openalex.org/keywords/software-security-assurance","display_name":"Software security assurance","score":0.4762846827507019},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4741988778114319},{"id":"https://openalex.org/keywords/vulnerability-management","display_name":"Vulnerability management","score":0.45607665181159973},{"id":"https://openalex.org/keywords/vulnerability-assessment","display_name":"Vulnerability assessment","score":0.34157395362854004},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.3408232033252716},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.2833011746406555},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.19834882020950317},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.14590391516685486},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.1270458698272705},{"id":"https://openalex.org/keywords/security-service","display_name":"Security service","score":0.07272961735725403}],"concepts":[{"id":"https://openalex.org/C40842320","wikidata":"https://www.wikidata.org/wiki/Q19423","display_name":"Buffer overflow","level":2,"score":0.9440793991088867},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.856999397277832},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.7236206531524658},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.6428159475326538},{"id":"https://openalex.org/C22680326","wikidata":"https://www.wikidata.org/wiki/Q7444867","display_name":"Secure coding","level":5,"score":0.6252607107162476},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.6137261390686035},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.5482540130615234},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.4762846827507019},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4741988778114319},{"id":"https://openalex.org/C172776598","wikidata":"https://www.wikidata.org/wiki/Q7943570","display_name":"Vulnerability management","level":4,"score":0.45607665181159973},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.34157395362854004},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.3408232033252716},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.2833011746406555},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.19834882020950317},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.14590391516685486},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.1270458698272705},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.07272961735725403},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.0},{"id":"https://openalex.org/C137176749","wikidata":"https://www.wikidata.org/wiki/Q4105337","display_name":"Psychological resilience","level":2,"score":0.0},{"id":"https://openalex.org/C542102704","wikidata":"https://www.wikidata.org/wiki/Q183257","display_name":"Psychotherapist","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1587/transinf.2018edp7192","is_oa":true,"landing_page_url":"https://doi.org/10.1587/transinf.2018edp7192","pdf_url":null,"source":{"id":"https://openalex.org/S2486202937","display_name":"IEICE Transactions on Information and Systems","issn_l":"0916-8532","issn":["0916-8532","1745-1361"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4320800604","host_organization_name":"Institute of Electronics, Information and Communication Engineers","host_organization_lineage":["https://openalex.org/P4320800604"],"host_organization_lineage_names":["Institute of Electronics, Information and Communication Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEICE Transactions on Information and Systems","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1587/transinf.2018edp7192","is_oa":true,"landing_page_url":"https://doi.org/10.1587/transinf.2018edp7192","pdf_url":null,"source":{"id":"https://openalex.org/S2486202937","display_name":"IEICE Transactions on Information and Systems","issn_l":"0916-8532","issn":["0916-8532","1745-1361"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4320800604","host_organization_name":"Institute of Electronics, Information and Communication Engineers","host_organization_lineage":["https://openalex.org/P4320800604"],"host_organization_lineage_names":["Institute of Electronics, Information and Communication Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEICE Transactions on Information and Systems","raw_type":"journal-article"},"sustainable_development_goals":[{"score":0.4300000071525574,"display_name":"Climate action","id":"https://metadata.un.org/sdg/13"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":37,"referenced_works":["https://openalex.org/W844671342","https://openalex.org/W1507845365","https://openalex.org/W1553796612","https://openalex.org/W1568530062","https://openalex.org/W1704569944","https://openalex.org/W1890662982","https://openalex.org/W1978492394","https://openalex.org/W1979693894","https://openalex.org/W1988082906","https://openalex.org/W1991162880","https://openalex.org/W1993710776","https://openalex.org/W1996446367","https://openalex.org/W2022961938","https://openalex.org/W2037786632","https://openalex.org/W2039970603","https://openalex.org/W2042033151","https://openalex.org/W2044901139","https://openalex.org/W2058012887","https://openalex.org/W2062625248","https://openalex.org/W2073950437","https://openalex.org/W2098806455","https://openalex.org/W2108629901","https://openalex.org/W2111974158","https://openalex.org/W2122992911","https://openalex.org/W2127969088","https://openalex.org/W2145733341","https://openalex.org/W2186105769","https://openalex.org/W2324618882","https://openalex.org/W2506495985","https://openalex.org/W2512083105","https://openalex.org/W2590106406","https://openalex.org/W2615111321","https://openalex.org/W2911601159","https://openalex.org/W3008276449","https://openalex.org/W4297833014","https://openalex.org/W4300534872","https://openalex.org/W4394298339"],"related_works":["https://openalex.org/W2393340519","https://openalex.org/W2383958993","https://openalex.org/W3043810321","https://openalex.org/W2892115998","https://openalex.org/W2560421591","https://openalex.org/W2123075981","https://openalex.org/W2796094063","https://openalex.org/W2293245356","https://openalex.org/W2062583373","https://openalex.org/W2537414278"],"abstract_inverted_index":{"The":[0,54],"security":[1,130],"of":[2,11,40,47,66,105,116],"a":[3,37,93],"software":[4,129],"program":[5],"critically":[6],"depends":[7],"on":[8,102],"the":[9,14,22,45,64,74,103,106,117],"prevention":[10],"vulnerabilities":[12,85,100],"in":[13,28,51,137],"source":[15],"code;":[16],"however,":[17],"conventional":[18],"computer":[19],"programs":[20],"lack":[21],"ability":[23],"to":[24,114],"identify":[25],"vulnerable":[26],"code":[27,43,60,99],"another":[29],"program.":[30],"Our":[31,77,122],"research":[32],"was":[33],"aimed":[34],"at":[35],"developing":[36],"technique":[38,55],"capable":[39],"generating":[41],"substitution":[42,94],"for":[44,127,133],"detection":[46],"buffer":[48,83],"overflow":[49,84],"vulnerability":[50],"C/C++":[52],"programs.":[53],"automatically":[56],"verifies":[57],"and":[58,89,96,132],"sanitizes":[59],"instrumentation":[61],"by":[62,91,97],"comparing":[63],"result":[65],"each":[67],"candidate":[68],"variable":[69,95],"with":[70],"that":[71,80],"expected":[72],"from":[73],"input":[75],"data.":[76],"results":[78],"showed":[79],"statements":[81],"containing":[82],"could":[86],"be":[87,111],"detected":[88,112],"prevented":[90],"using":[92],"sanitizing":[98],"based":[101],"size":[104],"variables.":[107],"Thus,":[108],"faults":[109],"can":[110],"prior":[113],"execution":[115],"statement,":[118],"preventing":[119],"malicious":[120],"access.":[121],"approach":[123],"is":[124],"particularly":[125],"useful":[126],"enhancing":[128],"monitoring,":[131],"designing":[134],"retrofitting":[135],"techniques":[136],"applications.":[138]},"counts_by_year":[{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":2},{"year":2020,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}