Bibliography.bib

@article{cheri,
  title={{The CHERI capability model: Revisiting RISC in an age of risk}},
  author={Woodruff, Jonathan and Watson, Robert and Chisnall, David and Moore, Simon and Anderson, Jonathan and Davis, Brooks and Laurie, Ben and Neumann, Peter and Norton, Robert and Roe, Michael},
  year={2014},
}
@online{llvmSROA,
  author = {{LLVM API Documentation}},
  title = {{SROA.cpp}},
  year = 2013,
  note={\url{http://llvm.org/docs/doxygen/html/SROA_8cpp_source.html}},
}
@book{steven1997advanced,
  title={Advanced compiler design implementation},
  author={Steven S. Muchnick},
  year={1997},
  publisher={Morgan Kaufmann}
}
@online{rust,
  author = {{Mozilla Corporation}},
  title = {{The Rust Programming Language}},
  year = 2013,
  note={\url{http://www.rust-lang.org/}},
}
@online{mpx,
  author = {{Intel Corporation}},
  title = {{Introduction to Intel® Memory Protection Extensions}},
  year = 2013,
  note={\url{https://software.intel.com/en-us/articles/introduction-to-intel-memory-protection-extensions}},
}
@online{ghostscript,
  author = {{GNU Project}},
  title = {{Ghostscript Source Code}},
  year = 2012,
  note= {\url{ftp://ftp.gnu.org/pub/gnu/ghostscript/}},
}
@online{olden,
  author = {{Martin C. Carlisle}},
  title = {{Olden benchmark}},
  year = 1996,
  note= {\url{http://www.martincarlisle.com/olden.html}},
}
@online{returnLocal,
  author = {{Nick Parlante}},
  title = {{Pointers and Memory}},
  year = 2000,
  note= {\url{http://cslibrary.stanford.edu/102/PointersAndMemory.pdf}},
}
@online{sslSrc,
  author = {{Eric A. Young, Tim J. Hudson}},
  title = {{OpenSSL: Source, Tarballs}},
  year = 2014,
  note= {\url{https://www.openssl.org/source/}},
}
@online{heartbleedBlog,
  author = {{Matthew Green}},
  title = {{Attack of the week: OpenSSL Heartbleed}},
  year = 2014,
  note= {\url{http://blog.cryptographyengineering.com/2014/04/attack-of-week-openssl-heartbleed.html}},
}
@online{bufferOverflow,
  author = {{T. Schwarz}},
  title = {{Buffer Overflow Attack}},
  year = 2004,
  organization={Santa Clara University},
  note= {\url{http://www.cse.scu.edu/~tschwarz/coen152_05/Lectures/BufferOverflow.html}},
}
@online{llvmGEP,
  author = {{LLVM Project}},
  title = {{The Often Misunderstood GEP Instruction}},
  year = 2014,
  note = {\url{http://llvm.org/docs/GetElementPtr.html}},
}
@online{llvmLangRef,
  author = {{LLVM Project}},
  title = {{LLVM Language Reference Manual}},
  year = 2014,
  note= {\url{http://llvm.org/docs/LangRef.html}},
}
@online{c99all,
  author = {ISO},
  title = {{INTERNATIONAL STANDARD, Programming Languages - C}},
  year = 2011,
  note= {\url{http://www.open-std.org/jtc1/sc22/wg14/www/docs/n1570.pdf}},
  urldate = {2014-05-27}
}
@inproceedings{jones1997backwards,
  title={{Backwards-Compatible Bounds Checking for Arrays and Pointers in C Programs}},
  author={Jones, Richard WM and Kelly, Paul HJ},
  booktitle={AADEBUG},
  pages={13--26},
  year={1997}
}

@article{austin1994efficient,
  title={Efficient detection of all pointer and array access errors},
  author={Austin, Todd M and Breach, Scott E and Sohi, Gurindar S},
  journal={ACM SIGPLAN Notices},
  volume={29},
  number={6},
  pages={290--301},
  year={1994},
  publisher={ACM}
}
@article{one1996smashing,
  title={Smashing the stack for fun and profit},
  author={One, Aleph},
  journal={Phrack magazine},
  volume={7},
  number={49},
  pages={365},
  year={1996}
}
@inproceedings{ruwase2004practical,
  title={A Practical Dynamic Buffer Overflow Detector.},
  author={Ruwase, Olatunji and Lam, Monica S},
  booktitle={NDSS},
  year={2004}
}
@inproceedings{necula2002ccured,
  title={CCured: type-safe retrofitting of legacy code},
  author={Necula, George C and McPeak, Scott and Weimer, Westley},
  booktitle={ACM SIGPLAN Notices},
  volume={37},
  number={1},
  pages={128--139},
  year={2002},
  organization={ACM}
}
@inproceedings{jim2002cyclone,
  title={Cyclone: A Safe Dialect of {C}.},
  author={Jim, Trevor and Morrisett, J Gregory and Grossman, Dan and Hicks, Michael W and Cheney, James and Wang, Yanling},
  booktitle={USENIX Annual Technical Conference, General Track},
  pages={275--288},
  year={2002}
}
@inproceedings{kratkiewicz2005using,
  title={Using a diagnostic corpus of C programs to evaluate buffer overflow detection by static analysis tools},
  author={Kratkiewicz, Kendra and Lippmann, Richard},
  booktitle={Proc. of Workshop on the Evaluation of Software Defect Detection Tools},
  year={2005}
}
@article{szekeres2012sok,
  title={SoK: Eternal war in memory},
  author={Szekeres, L{\'a}szl{\'o} and Payer, Mathias and Wei, Tao and Song, Dawn},
  year={2012}
}
@inproceedings{slowinska2012body,
  title={Body armor for binaries: preventing buffer overflows without recompilation},
  author={Slowinska, Asia and Stancescu, Traian and Bos, Herbert},
  booktitle={Proceedings of the USENIX Security Symposium},
  year={2012}
}
@inproceedings{akritidis2009baggy,
  title={Baggy Bounds Checking: An Efficient and Backwards-Compatible Defense against Out-of-Bounds Errors.},
  author={Akritidis, Periklis and Costa, Manuel and Castro, Miguel and Hand, Steven},
  booktitle={USENIX Security Symposium},
  pages={51--66},
  year={2009}
}
@article{shetty2005heapmon,
  title={Heapmon: a low overhead, automatic, and programmable memory bug detector},
  author={Shetty, Rithin Kumar},
  year={2005}
}
@inproceedings{nagarakatte2009softbound,
  title={SoftBound: highly compatible and complete spatial memory safety for c},
  author={Nagarakatte, Santosh and Zhao, Jianzhou and Martin, Milo MK and Zdancewic, Steve},
  booktitle={ACM Sigplan Notices},
  volume={44},
  number={6},
  pages={245--258},
  year={2009},
  organization={ACM}
}
@article{devietti2008hardbound,
  title={{Hardbound: architectural support for spatial safety of the C programming language}},
  author={Devietti, Joe and Blundell, Colin and Martin, Milo MK and Zdancewic, Steve},
  journal={ACM Sigplan Notices},
  volume={43},
  number={3},
  pages={103--114},
  year={2008},
  publisher={ACM}
}
@inproceedings{xu2004efficient,
  title={{An efficient and backwards-compatible transformation to ensure memory safety of C programs}},
  author={Xu, Wei and DuVarney, Daniel C and Sekar, R},
  booktitle={ACM SIGSOFT Software Engineering Notes},
  volume={29},
  number={6},
  pages={117--126},
  year={2004},
  organization={ACM}
}
@inproceedings{peter2013arrakis,
  title={Arrakis: a case for the end of the empire},
  author={Peter, Simon and Anderson, Thomas},
  booktitle={Proceedings of the 14th USENIX conference on Hot Topics in Operating Systems},
  pages={26--26},
  year={2013},
  organization={USENIX Association}
}

@misc{llvmAddrSan,
  title={{LLVM Address Sanitization Doc}},
  note={\url{http://clang.llvm.org/docs/AddressSanitizer.html}}
}

@misc{llvmAddrSanAlgo,
  title={{LLVM Address Sanitizer Algorithm}},
  note={\url{https://code.google.com/p/address-sanitizer/wiki/AddressSanitizerAlgorithm}}
}

@misc{intelMpx,
  title={Introduction to Intel Memory Protection Extensions},
  note={\url{http://software.intel.com/en-us/articles/introduction-to-intel-memory-protection-extensions}}
}

@misc{intelMpxSpec,
  title={Intel Architecture Instruction Set Extensions Programming Reference},
  note={\url{http://download-software.intel.com/sites/default/files/319433-015.pdf}}
}

@inproceedings{cowan1998stackguard,
  title={StackGuard: Automatic adaptive detection and prevention of buffer-overflow attacks},
  author={Cowan, Crispin and Pu, Calton and Maier, Dave and Hinton, Heather and Walpole, Jonathan and Bakke, Peat and Beattie, Steve and Grier, Aaron and Wagle, Perry and Zhang, Qian and others},
  booktitle={Proceedings of the 7th USENIX Security Symposium},
  volume={81},
  pages={346--355},
  year={1998}
}

@inproceedings{mccanne1993bsd,
  title={The BSD packet filter: A new architecture for user-level packet capture},
  author={McCanne, Steven and Jacobson, Van},
  booktitle={Proceedings of the USENIX Winter 1993 Conference Proceedings on USENIX Winter 1993 Conference Proceedings},
  pages={2--2},
  year={1993},
  organization={USENIX Association}
}

@inproceedings{filander2003comparison,
  title={A Comparison of Publicly Available Tools for Dynamic Buffer Overflow Prevention.},
  author={Wilander, John and Kamkar, Mariam},
  booktitle={NDSS},
  volume={3},
  pages={149--162},
  year={2003}
}

@article{miller1990empirical,
  title={An empirical study of the reliability of UNIX utilities},
  author={Miller, Barton P and Fredriksen, Louis and So, Bryan},
  journal={Communications of the ACM},
  volume={33},
  number={12},
  pages={32--44},
  year={1990},
  publisher={ACM}
}

@article{necula1996safe,
  title={Safe kernel extensions without run-time checking},
  author={Necula, George C and Lee, Peter},
  journal={SIGOPS Operating Systems Review},
  volume={30},
  pages={229--244},
  year={1996},
  publisher={[New York, NY, ACM Special Interest Group on Operating Systems]}
}

@inproceedings{wahbe1994efficient,
  title={Efficient software-based fault isolation},
  author={Wahbe, Robert and Lucco, Steven and Anderson, Thomas E and Graham, Susan L},
  booktitle={ACM SIGOPS Operating Systems Review},
  volume={27},
  number={5},
  pages={203--216},
  year={1994},
  organization={ACM}
}

@inproceedings{kawahito2000effective,
  title={Effective null pointer check elimination utilizing hardware trap},
  author={Kawahito, Motohiro and Komatsu, Hideaki and Nakatani, Toshio},
  booktitle={ACM SIGOPS Operating Systems Review},
  volume={34},
  number={5},
  pages={139--149},
  year={2000},
  organization={ACM}
}

@inproceedings{eigler2003mudflap,
  title={Mudflap: Pointer Use Checking for C/C+},
  author={Eigler, Frank Ch},
  booktitle={{GCC Developers Summit}},
  pages={57},
  year={2003}
}

% --------------------------------------------------------------------------
% Not reviewed yet
% --------------------------------------------------------------------------



@book{necula2002proof,
  title={Proof-carrying code. design and implementation},
  author={Necula, George C},
  year={2002},
  publisher={Springer}
}

@inproceedings{dhurjati2006backwards,
  title={{Backwards-compatible array bounds checking for C with very low overhead}},
  author={Dhurjati, Dinakar and Adve, Vikram},
  booktitle={Proceedings of the 28th international conference on Software engineering},
  pages={162--171},
  year={2006},
  organization={ACM}
}

@incollection{clarke2004tool,
  title={{A tool for checking ANSI-C programs}},
  author={Clarke, Edmund and Kroening, Daniel and Lerda, Flavio},
  booktitle={Tools and Algorithms for the Construction and Analysis of Systems},
  pages={168--176},
  year={2004},
  publisher={Springer}
}


@misc{specint,
  title={Standard Performance Evaluation Corportation Benchmarks},
  author={{SPEC 95}},
  year={1995},
  note={\url{http://www.spec.org/osg/cpu95/CINT95}}
}



@article{patil1997low,
  title={{Low-cost, concurrent checking of pointer and array accesses in C programs}},
  author={Patil, Harish and Fischer, Charles},
  journal={Softw., Pract. Exper.},
  volume={27},
  number={1},
  pages={87--110},
  year={1997}
}
@article{xu2004efficient,
  title={{An efficient and backwards-compatible transformation to ensure memory safety of C programs}},
  author={Xu, Wei and DuVarney, Daniel C and Sekar, R},
  journal={ACM SIGSOFT Software Engineering Notes},
  volume={29},
  number={6},
  pages={117--126},
  year={2004},
  publisher={ACM}
}
@article{criswell2007secure,
  title={Secure virtual architecture: a safe execution environment for commodity operating systems},
  author={Criswell, John and Lenharth, Andrew and Dhurjati, Dinakar and Adve, Vikram},
  journal={ACM SIGOPS Operating Systems Review},
  volume={41},
  number={6},
  pages={351--366},
  year={2007},
  publisher={ACM}
}