DISCOVER: detecting algorithmic complexity vulnerabilities
Payas Awadhutkar, Ganesh Ram Santhanam, Benjamin Holland, Suresh C. Kothari · 2019
Algorithmic Complexity Vulnerabilities (ACV) are a class of vulnerabilities that enable Denial of Service Attacks. ACVs stem from asymmetric consumption of resources due to complex loop termination logic, recursion, and/or resource intensive library APIs. Completely automated detection of ACVs is intractable and it calls for tools that assist human analysts.