ITS 4 : A Static Vulnerability Scanner for C and C + +

We describe ITS4, a tool for statically scanning security-critical C and C++ source code for vulnerabil-ities. Compared to other techniques, our results indicate that this approach stakes out a new middle ground on accuracy, while being eecient enough to give real-time feedback to a developer during coding. Our technique is also simple enough that it can easily be applied to C++, despite the complexities inherent in the language. We have used our tool to nd new remotely-exploitable vulnerabilities in a widely distributed software package, as well as a major piece of e-commerce software. Our tool, along with its source code, is available from