Denial of Service through Regular Expressions

Abstract: 

My talk will demonstrate how common backtracking regular expression matching systems can take exponential time. We will discuss some of the theory behind these systems and will use examples taken from real systems to point out how real software exhibits these vulnerabilities.

BibTeX
@conference {270141,
author = {Scott Crosby},
title = {Denial of Service through Regular Expressions},
year = {2003},
address = {Washington, D.C.},
publisher = {USENIX Association},
month = aug
}
Download