Counting in Regexes Considered Harmful: Exposing ReDoS Vulnerability of Nonbacktracking Matchers

No ratings

Presented at USENIX Security 2022 by

In this paper, we study the performance characteristics of nonbacktracking regex matchers and their vulnerability against ReDoS (