Xun An

dblp:322/3662 · DBLP profile ↗
← Back
3ranked-venue papers
2as first author
3since 2021 · last 2024
0009-0003-4598-391XORCID · corroborated

Domains — the database's venue-derived domains; a paper can count in several

Software engineering, systems software and programming languages · 2 · 2 first-author · 2 since 2021Security and privacy · 1 · 1 since 2021
YearPublicationVenuePosition
2024 Structure-Sensitive Pointer Analysis for Multi-structure Objects
abstract
Static analysis is a method within software analysis, and pointer analysis is an important component of static analysis. An important dimension of pointer analysis is field-sensitivity, which has been proven to effectively enhance the accuracy of pointer analysis results. A crucial area of research within field-sensitivity is structure-sensitivity. Structure-sensitivity has been shown to further enhance the precision of pointer analysis. However, existing structure-sensitive methods cannot handle cases where an object possesses multiple structures.
Xun An, Xiaoqi Jia, Haichao Du, Yamin Xie
Internetware1
2023 Refining Use-After-Free Defense: Eliminating Dangling Pointers in Registers and Memory
abstract
The prevalence of use-after-free (UAF) vulnerabilities poses a significant threat to software security, with dangling pointers identified as the primary cause. However, existing de-fense methods suffer from bypass attacks, high runtime overhead, or only address memory dangling pointers while neglecting register-based ones that also contribute to UAF vulnerabilities. To overcome these shortcomings, we introduce a novel approach, ISDE, that eliminates both register and memory dangling point-ers with minimal additional runtime overhead. ISDE leverages an inter-procedural static pointer analysis method to statically collect object pointers during compilation, and uses the call graph and data flow graph to identify and eliminate potential dangling pointers. Our implementation of ISDE demonstrated its effectiveness in defending against real-world UAF vulnerabilities while maintaining efficiency in the SPEC CPU2006 evaluation.
Xun An, Qihang Zhou, Haichao Du, Xiaoqi Jia
APSEC1
2022 An Efficient Use-after-Free Mitigation Approach via Static Dangling Pointer Nullification
Xiaoqi Jia, Xun An, Shengzhi Zhang
SEC3