ITS4: A Static Vulnerability Scanner for C and C++ Code.

John Viega, J. T. Bloch, Y. Kohno, Gary McGraw

Browse the full ACSAC paper archive.