Improving Security Using Extensible Lightweight Static提高安全性使用可扩展的轻量级静态.pptVIP

Improving Security Using Extensible Lightweight Static Analysis David Evans and David Larochelle Topics Static analysis concepts Splint Described Splint Limitations/Analysis Real world results Static Analysis Concepts Ways of eliminating flaws: Human code reviews Testing Static Analysis Most attacks stem from repeated exploits of well-known problems Tools can help codify what is known about common vulnerabilities Static Analysis Concepts Low end - standard compilers performing type checking and other simple analysis Other extreme - formal specification with theorem prover Lightweight a