Concepedia

Format String Vulnerability Detection

Format String Vulnerability Detection is a static vulnerability analysis technique that identifies security flaws arising from improper use of format string functions in source code by detecting instances where untrusted input influences format specifiers, thereby enabling exploitation through stack manipulation or memory disclosure.

15

Publications

1.7K

Citations

34

Authors

16

Institutions

Publications per year

2017–2026

1

Parents

Publications

15

Improving security using extensible lightweight static analysis

David Evans, David Larochelle · IEEE Software · 2002 · 470 citations

, , +13

Detecting format string vulnerabilities with type qualifiers

Umesh Shankar, Kunal Talwar, Jeffrey S. Foster et al. · 2001 · 359 citations

, , +15

Securing Software by Enforcing Data-flow Integrity

2006 · 322 citations

, , +15

Efficient and extensible security enforcement using dynamic data flow analysis

Walter Chang, Brandon Streiff, Calvin Lin · 2008 · 134 citations

, , +16

Buffer overflow and format string overflow vulnerabilities

Kyung-suk Lhee, Steve J. Chapin · Software Practice and Experience · 2003 · 94 citations · Full text

, , +13

1–5 of 15

Authors

34

  1. DW
    David Wagner

    University of California, Berkeley, United States

    2 publications · 404 citations

    2

    h-index

  2. DA
    Dzintars Avots

    Stanford University, United States

    2 publications · 98 citations

    2

    h-index

  3. SA
    Sanjit A. Seshia

    University of California, Berkeley, United States

    2 publications · 47 citations

    2

    h-index

  4. MS
    Monica S. Lam

    Stanford University, United States

    2 publications · 98 citations

    2

    h-index

  5. MD
    Michael Dalton

    NOAA National Marine Fisheries Service Alaska Fisheries Science Center, United States

    2 publications · 98 citations

    2

    h-index

1–5 of 34

Institutions

16

  1. Carnegie Mellon University

    Pittsburgh, United States

    2 h-index

    4 publications

    94 citations

  2. University of California, Berkeley

    Berkeley, United States

    2 h-index

    6 publications

    1.5K citations

  3. Stanford University

    Stanford, United States

    2 h-index

    8 publications

    392 citations

  4. Seoul National University

    Seoul, South Korea

    1 h-index

    2 publications

    104 citations

  5. Syracuse University

    Syracuse, United States

    1 h-index

    2 publications

    188 citations

  6. University of Wisconsin System

    Madison, United States

    1 h-index

    1 publications

    27 citations

  7. The University of Texas at Austin

    Austin, United States

    1 h-index

    3 publications

    402 citations

  8. University of Wisconsin–Madison

    Madison, United States

    1 h-index

    3 publications

    81 citations

1–8 of 16

Venues

  1. IEEE Software

    1 publications · 470 citations

    1

    h-index

  2. Defense Technical Information Center (DTIC)

    Repository · 1 publications · 20 citations

    1

    h-index

  3. Software Practice and Experience

    1 publications · 94 citations

    1

    h-index

  4. 1

    h-index

1–4