Add link to associated publication(s)

NicolaasWeideman / RegexStaticAnalysis

A tool to perform static analysis on regexes to determine whether they are vulnerable to ReDoS.

MIT License

109 stars 28 forks source link

Closed davisjam closed 6 years ago

davisjam commented 6 years ago

It's not entirely clear to me what publication(s) are associated with this project.

Looks like it is (at least) one of the following:

"Turning Evil Regexes Harmless"
"Analyzing Catastrophic Backtracking Behavior in Practical Regular Expression Matching"
"Analyzing matching time behavior of backtracking regular expression matchers by using ambiguity of NFA"

Sticking a note in the README would be nice.

NicolaasWeideman commented 6 years ago

Thanks for the suggestion, I added the links.

davisjam commented 6 years ago

Great, thanks.