My talk will demonstrate how common backtracking regular expression matching systems
can take exponential time. We will discuss some of the theory behind these systems and will
use examples taken from real systems to point out how real software exhibits these
vulnerabilities.