paper.bib

@INPROCEEDINGS{hermerschmidt_encodingTable,
	author={L. Hermerschmidt and S. Kugelmann and B. Rumpe},
	booktitle={2015 IEEE Security and Privacy Workshops},
	title={Towards More Security in Data Exchange: Defining Unparsers with Context-Sensitive Encoders for Context-Free Grammars},
	year={2015},
	pages={134-141},
	doi={10.1109/SPW.2015.29},
	month={May}
}

@misc{McHammerCoder,
  author = {Bieschke, Tobias and Stanchev, Peter},
  title = {{McHammerCoder}},
  year = 2017,
  howpublished = "\url{https://github.com/McHammerCoder/McHammerCoder}",
   node = {online accessed: 2016-06-20}
}

@book{parr2013definitive,
  title={The definitive {ANTLR} 4 reference},
  author={Parr, Terence},
  year={2013},
  publisher={Pragmatic Bookshelf}
}

@book{aho1986compilers,
  title={Compilers, Principles, Techniques},
  author={Aho, Alfred V and Sethi, Ravi and Ullman, Jeffrey D},
  year={1986},
  publisher={Addison wesley}
}

@incollection{zaytsev2014parsing,
  title={Parsing in a broad sense},
  author={Zaytsev, Vadim and Bagge, Anya Helene},
  booktitle={Model-Driven Engineering Languages and Systems},
  pages={50--67},
  year={2014},
  publisher={Springer}
}

@incollection{weinberger2011systematic,
  title={A systematic analysis of {XSS} sanitization in web application frameworks},
  author={Weinberger, Joel and Saxena, Prateek and Akhawe, Devdatta and Finifter, Matthew and Shin, Richard and Song, Dawn},
  booktitle={Computer Security--ESORICS 2011},
  pages={150--171},
  year={2011},
  publisher={Springer}
}

@article{krahn2010monticore,
  title={MontiCore: a framework for compositional development of domain specific languages},
  author={Krahn, Holger and Rumpe, Bernhard and V{\"o}lkel, Steven},
  journal={International journal on software tools for technology transfer},
  volume={12},
  number={5},
  pages={353--372},
  year={2010},
  publisher={Springer}
}

@mastersthesis{kugelmann,
    author    = "Stephan Kugelmann",
    title     = "Generierung von kontextabhängigen {Encodern}
aus {MontiCore} {Grammatiken}",
    school    = "RWTH Aachen",
    year      = "2015"

}

@mastersthesis{gaviola,
    author    = "Diego Gaviola",
    title     = "Generated pretty printers for MontiCore",
    school    = "RWTH Aachen",
    year      = "2009"

}

@article{chomsky1956three,
  title={Three models for the description of language},
  author={Chomsky, Noam},
  journal={Information Theory, IRE Transactions on},
  volume={2},
  number={3},
  pages={113--124},
  year={1956},
  publisher={IEEE}
}

@misc{aho1979introduction,
  title={Introduction to automata theory, languages and computation},
  author={Hopcroft, John  and Ullman, Jeffrey},
  year={1979},
  publisher={Addison-Wesley, Reading, MA}
}

@inproceedings{javades,
  title={The perils of Java deserialization},
  author={Alvaro Mu{\~{n}}oz},
  booktitle={HPE Security Research},
  year={2016},
  organization={Hewlett Packard Enterprise}
 }

@article{parr2014adaptive,
  title={Adaptive {LL (*)} parsing: the power of dynamic analysis},
  author={Parr, Terence and Harwell, Sam and Fisher, Kathleen},
  journal={ACM SIGPLAN Notices},
  volume={49},
  number={10},
  pages={579--598},
  year={2014},
  publisher={ACM}
}
@inproceedings{kirda2006noxes,
  title={Noxes: a client-side solution for mitigating cross-site scripting attacks},
  author={Kirda, Engin and Kruegel, Christopher and Vigna, Giovanni and Jovanovic, Nenad},
  booktitle={Proceedings of the 2006 ACM symposium on Applied computing},
  pages={330--337},
  year={2006},
  organization={ACM}
}


@inproceedings{samuel2011context,
  title={Context-sensitive auto-sanitization in web templating languages using type qualifiers},
  author={Samuel, Mike and Saxena, Prateek and Song, Dawn},
  booktitle={Proceedings of the 18th ACM conference on Computer and communications security},
  pages={587--600},
  year={2011},
  organization={ACM}
}



@inproceedings{bangert2014nail,
  title={Nail: A practical tool for parsing and generating data formats},
  author={Bangert, Julian and Zeldovich, Nickolai},
  booktitle={11th USENIX Symposium on Operating Systems Design and Implementation (OSDI 14)},
  pages={615--628},
  year={2014}
}

@misc{owasp,
  author = {Williams, Jeff and Mattatall, Neil and Manico , Jim},
  title = {{XSS} (Cross Site Scripting) Prevention Cheat Sheet},
  year = 2016,
  howpublished = "\url{https://www.owasp.org/index.php/XSS_(Cross_Site_Scripting)_Prevention_Cheat_Sheet}",
  node = {online accessed: 2016-06-16}
}

@misc{WWWa,
  author = {Botezatu, Loredana},
  title = {Yahoo Accounts Hijacked via Cross-Site-Scripting-Type Attack},
  year = 2013,
  howpublished = "\url{http://www.hotforsecurity.com/blog/yahoo-accounts-hijacked-via-xss-type-attack-5172.html}",
  node = {online accessed: 2016-06-16}
}

@misc{rO0,
  author = {Arshan Dabirsiaghi},
  title = {rO0, a {Java} agent that protects applications from deserialization attacks},
  year = 2016,
  howpublished = "\url{https://github.com/Contrast-Security-OSS/contrast-rO0}",
   node = {online accessed: 2016-06-18	}
}


@misc{owaspcs,
  author = {Arshan Dabirsiaghi},
  title = {{OWASP} deserialization cheat sheet},
  year = 2016,
  howpublished = "\url{https://www.owasp.org/index.php/Deserialization_Cheat_Sheet}",
   node = {online accessed: 2016-06-18	}
}

@misc{Hammer,
  author = {Patterson, Meredith L.},
  title = {Hammer},
  year = 2016,
  howpublished = "\url{https://github.com/UpstandingHackers/hammer}",
   node = {online accessed: 2016-06-16}
}

@article{eddington2011peach,
  title={Peach fuzzing platform},
  author={Eddington, Michael},
  journal={Peach Fuzzer},
  pages={34},
  year={2011}
}

@misc{freemaker,
  author = {Apache},
  title = {{FreeMaker} - a template engine for {Java}},
  year = 2014,
  howpublished = "\url{http://freemarker.org/}",
   node = {online accessed: 2016-06-29}
}

@inproceedings{long2000most,
  title={The most efficient uniquely decipherable encoding schemes},
  author={Long, Dongyang and Jia, Weijia},
  booktitle={Web Information Systems Engineering, 2000. Proceedings of the First International Conference on},
  volume={1},
  pages={159--163},
  year={2000},
  organization={IEEE}
}

@misc{zap,
  author = {Simon Bennetts and OWASP Community},
  title = {{Zed Attack Proxy}},
  year = 2017,
  howpublished = "\url{https://www.owasp.org/index.php/OWASP_Zed_Attack_Proxy_Project}",
   node = {online accessed: 2016-07-2}
}

@misc{fuzzdb,
  author = {Adam Muntner},
  title = {{FuzzDB}},
  year = 2017,
  howpublished = "\url{https://github.com/fuzzdb-project/fuzzdb}",
   node = {online accessed: 2016-07-2}
}

@misc{ibm,
  author = {IBM},
  title = {Security {AppScan}},
  year = 2016,
  howpublished = "\url{http://www-03.ibm.com/software/products/en/appscan}",
   node = {online accessed: 2016-07-2}
}

@misc{headers,
  author = {Manico, Jim and Menezes, Alexandre},
  title = {{OWASP} Secure Headers Project},
  year = 2015,
  howpublished = "\url{https://www.owasp.org/index.php/OWASP_Secure_Headers_Project#tab=Headers}",
   node = {online accessed: 2016-07-2}
}

@misc{bean,
  author = {Seim, Kevin},
  title = {{BeanIO}},
  year = 2013,
  howpublished = "\url{http://beanio.org/}",
   node = {online accessed: 2016-07-2}
}

@book{aho1986compilers,
  title={Compilers, Principles, Techniques},
  author={Aho, Alfred V and Sethi, Ravi and Ullman, Jeffrey D},
  year={1986},
  publisher={Addison wesley}
}
@book{johnson1975yacc,
  title={Yacc: Yet another compiler-compiler},
  author={Johnson, Stephen C},
  volume={32},
  year={1975},
  publisher={Bell Laboratories Murray Hill, NJ}
}

@book{donnelly1992bison,
  title={Bison: the Yacc-compatible parser generator},
  author={Donnelly, Charles and Stallman, Richard},
  volume={1},
  year={1992},
  publisher={Free Software Foundation Cambridge (MA) 02139}
}

@inproceedings{arnoldus2011less,
  title={Less is more: unparser-completeness of metalanguages for template engines},
  author={Arnoldus, BJ and van den Brand, MGJ and Serebrenik, Alexander},
  booktitle={ACM SIGPLAN Notices},
  volume={47},
  pages={137--146},
  year={2011},
  organization={ACM}
}

@misc{symantec,
  title={Symantec Internet Security Threat Report: Trends for July–December 2007 (Executive Summary)},
  author={Dean Turner},
  year={April 2008}
}

@article{underwood2012grammar,
  title={Grammar-based specification and parsing of binary file formats},
  author={Underwood, William},
  journal={International Journal of Digital Curation},
  volume={7},
  number={1},
  pages={95--106},
  year={2012}
}

@inproceedings{back2002datascript,
  title={DataScript-A specification and scripting language for binary data},
  author={Back, Godmar},
  booktitle={International Conference on Generative Programming and Component Engineering},
  pages={66--77},
  year={2002},
  organization={Springer}
}

@article{mccann2000packet,
  title={Packet types: abstract specification of network protocol messages},
  author={McCann, Peter J and Chandra, Satish},
  journal={ACM SIGCOMM Computer Communication Review},
  volume={30},
  number={4},
  pages={321--333},
  year={2000},
  publisher={ACM}
}

@phdthesis{cattell1982formalization,
  title={Formalization and automatic derivation of code generators},
  author={Cattell, R GG},
  year={1982},
  school={Carnegie-Mellon University}
}

@article{charniak1983parser,
  title={A parser with something for everyone},
  author={Charniak, Eugene},
  journal={Parsing natural language},
  pages={117--149},
  year={1983}
}

@article{jaffe1978necessary,
  title={A necessary and sufficient pumping lemma for regular languages},
  author={Jaffe, Jeffrey},
  journal={ACM SIGACT News},
  volume={10},
  number={2},
  pages={48--49},
  year={1978},
  publisher={ACM}
}


@misc{pace2003course,
  title={Course notes for Computability and Complexity},
  author={Pace, Gordon J},
  year={2003}
}

@book{erk2008theoretische,
  title={Theoretische Informatik: Eine umfassende Einf{\"u}hrung},
  author={Erk, Katrin and Priese, Lutz},
  year={2008},
  publisher={Springer-Verlag}
}

@article{mcnaughton1960regular,
  title={Regular expressions and state graphs for automata},
  author={McNaughton, Robert and Yamada, Hisao},
  journal={IEEE Transactions on Electronic Computers},
  volume={1},
  number={EC-9},
  pages={39--47},
  year={1960}
}

@book{aho_compiler_2003,
  title={Compilers: Principles, Techniques and Tools},
  author={Aho, Alfred V},
  year={2003},
  publisher={Pearson Education India}
}

@INPROCEEDINGS{Wadler_pp_1998,
    author = {Philip Wadler},
    title = {{A Prettier Printer}},
    booktitle = {Journal of Functional Programming},
    year = {1998},
    pages = {223--244},
    publisher = {Palgrave Macmillan}
}

@incollection{Hughes_pp_1995,
	year={1995},
	isbn={978-3-540-59451-2},
	booktitle={Advanced Functional Programming},
	volume={925},
	series={LNCS},
	editor={Jeuring, Johan and Meijer, Erik},
	doi={10.1007/3-540-59451-5_3},
	title={The Design of a Pretty-printing Library},
	publisher={Springer},
	author={Hughes, John},
	pages={53-96},
	language={English}
}

@incollection{Vadim_unparsing-survey_2014,
	year={2014},
	isbn={978-3-319-11652-5},
	booktitle={Model-Driven Engineering Languages and Systems (MODELS)},
	volume={8767},
	series={LNCS},
	editor={Dingel, Juergen and Schulte, Wolfram and Ramos, Isidro and Abrahão, Silvia and Insfran, Emilio},
	doi={10.1007/978-3-319-11653-2_4},
	title={{Parsing in a Broad Sense}},
	publisher={Springer},
	keywords={Parsing; unparsing; pretty-printing; model synchronisation; technical space bridging; bidirectional model transformation},
	author={Zaytsev, Vadim and Bagge, Anya H.},
	pages={50-67},
	language={English}
}

@article{vandenBrand_gen-unparser_1996,
	 author = {van den Brand, Mark and Visser, Eelco},
	 title = {{Generation of Formatters for Context-free Languages}},
	 journal = {ACM Transactions Software Engineering Methodology (TOSEM)},
	 issue_date = {Jan. 1996},
	 volume = {5},
	 number = {1},
	 month = {January},
	 year = {1996},
	 issn = {1049-331X},
	 pages = {1--41},
	 numpages = {41},
	 doi = {10.1145/226155.226156},
	 acmid = {226156},
	 publisher = {ACM},
	 address = {New York, NY, USA},
	 keywords = {document preparation, program generators},
}

@incollection{Matsuda_FliPpr_2013,
	year={2013},
	isbn={978-3-642-37035-9}, 
	booktitle={Programming Languages and Systems}, 
	volume={7792}, series={LNCS}, 
	editor={Felleisen, Matthias and Gardner, Philippa}, 
	doi={10.1007/978-3-642-37036-6_6}, 
	title={{FliPpr: A Prettier Invertible Printing System}}, 
	publisher={Springer}, 
	author={Matsuda, Kazutaka and Wang, Meng}, 
	pages={101-120}, 
	language={English} 
}

@inproceedings{Rendel_define-parser-pp-together_2010,
	 author = {Rendel, Tillmann and Ostermann, Klaus},
	 title = {{Invertible Syntax Descriptions: Unifying Parsing and Pretty Printing}},
	 booktitle = {ACM Haskell Symposium on Haskell},
	 year = {2010},
	 isbn = {978-1-4503-0252-4},
	 location = {Baltimore, Maryland, USA},
	 pages = {1--12},
	 numpages = {12},
	 doi = {10.1145/1863523.1863525},
	 acmid = {1863525},
	 publisher = {ACM},
	 keywords = {embedded domain specific languages, invertible computation, parser combinators, pretty printing},
}

@ARTICLE{locasto_securtiy-software-fail-to-compose_2009,
	author={Locasto, Michael E. and Bratus, Sergey and Schulte, Brian},
	journal={IEEE Security \& Privacy},
	title={{Bickering In-Depth: Rethinking the Composition of Competing Security Systems}},
	year={2009},
	volume={7},
	number={6},
	pages={77-81},
	doi={10.1109/MSP.2009.189},
	ISSN={1540-7993},
	month={November},
	}



@book{burge_parser_combinators_1975,
	author        = "Burge, William H",
	title         = "{Recursive programming techniques}",
	publisher     = "Addison-Wesley",
	address       = "Reading, MA",
	series        = "Systems programming series",
	year          = "1975",
}

@article{hutton_parser-combinators_1992,
	title = "Higher-order functions for parsing",
	doi = "10.1017/S0956796800000411",
	publisher = "Cambridge University Press",
	address = "Cambridge, UK",
	author = "Graham Hutton",
	volume = "2",
	number = "3",
	pages = "323-343",
	year = "1992",
	month = "007",
	day = "001",
	journal = "Journal of Functional Programming"
}

@Inbook{fokker_parser-combinators_1995,
	author="Fokker, Jeroen",
	editor="Jeuring, Johan
	and Meijer, Erik",
	title="Functional parsers",
	bookTitle="Advanced Functional Programming: First International Spring School on Advanced Functional Programming Techniques B{\aa}stad, Sweden, May 24--30, 1995 Tutorial Text",
	year="1995",
	publisher="Springer Berlin Heidelberg",
	address="Berlin, Heidelberg",
	pages="1--23",
	isbn="978-3-540-49270-2",
	doi="10.1007/3-540-59451-5_1"
}

@ARTICLE{bratus_input-processing_2014,
	author={Bratus, S. and Darley, T. and Locasto, M. and Patterson, Meredith L. and Shapiro, R.B. and Shubina, A.},
	journal={Security Privacy, IEEE},
	title={Beyond Planted Bugs in ``Trusting Trust'': The Input-Processing Frontier},
	year={2014},
	month={Jan},
	volume={12},
	number={1},
	pages={83-87},
	keywords={Big Data;digital forensics;program debugging;trusted computing;Big Data;event management;forensics;input-processing frontier;network monitoring;planted bugs;security information;security tools;trust;Automata;Big data;Computer bugs;Computer security;Formal languages;Internet;Programming;CSA;SIEM;big data;intrusion detection system},
	doi={10.1109/MSP.2014.1},
	ISSN={1540-7993},}

@ARTICLE{sassaman_unrecognizable-protocols_2011,
	title={The Halting problems of network stack insecurity},
	author={Sassaman, Len and Patterson, Meredith L. and Bratus, Sergey and Shubina, Anna},
	journal={login},
	pages={22-32},
	volume={36},
	number={6},
	year={2011}
}

@inproceedings{momot_langsec_secdev_2016,
	title={The seven turrets of babel: A taxonomy of langsec errors and how to expunge them},
	author={Momot, Falcon and Bratus, Sergey and Hallberg, Sven and Patterson, Meredith L.},
	year={2016},
	booktitle = {IEEE SecDev},
	location = {Boston}
}


@book{ghosh_internal-DSLs_2010,
 author = {Ghosh, Debasish},
 title = {DSLs in Action},
 year = {2010},
 isbn = {9781935182450},
 edition = {1st},
 publisher = {Manning Publications Co.},
 address = {Greenwich, CT, USA},
}