Insecure context switching: inoculating regular expressions for survivability
Will Drewry, Tavis Ormandy · 2008
For most computer end–users, web browsers and Internet services act as the providers and protectors of their personal information, from bank accounts to personal correspondence. These systems are critical to users ’ continued lifestyles but often show no evidence of survivability [43], or robustness against present and future attacks. Software defects, considered the largest risk to survivability [43], are quite prevalent in consumer products and Web service software components [9]. Recent widespread security issues [17] [16] serve to emphasize this fact and show a lack investment in survivability engineering