检索结果-内蒙古大学图书馆

Software vulnerability mitigation as a proper subset of software maintenance

JOURNAL OF SOFTWARE MAINTENANCE AND EVOLUTION-RESEARCH AND PRACTICE 2005年第6期17卷 379-400页

作者： Hanebutte, N Oman, PW Univ Idaho Dept Comp Sci Moscow ID 83844 USA

Through the rise of the Internet and Web-based software our computing environment has evolved from well-defined topologies into loosely organized, unbounded topologies where user profiles and intentions are largely unknown. With less than 20 years experience in this chaotic computing environment, software developers and maintenance professionals are still learning efficient and systematic means of locating faults and code vulnerabilities that can be exploited by malicious users. Exponential growth in software intrusions, attacks, and security incidents has been observed worldwide. The question that arises, however, is whether software security considerations are genuinely new issues, or can they be addressed using existing definitions, technologies, and tools. That is, can we portray software vulnerabilities, especially specific instances of exploitable code, as software faults so that systematic software maintenance practices can be applied? In this paper we present a longitudinal analysis of software vulnerabilities in a widely used file-transfer program, by examining 12 years of maintenance records documenting perfective, corrective, and adaptive changes to the software suite. Our analysis of the program's software faults and vulnerabilities indicate that they are not distinct categories, but rather two overlapping sets that should not be addressed separately. An in-depth analysis of two dominant security flaws shows that they are canonical software faults that can lead to failure even in the absence of malicious user behavior. Our longitudinal analysis demonstrates that every security vulnerability in the program suite could have been eliminated prior to release via proactive software maintenance engineering. Copyright (c) 2005 John Wiley & Sons, Ltd.

关键词： software security software vulnerability fault analysis code exploits preventative maintenance

来源：评论

学校读者我要写书评

暂无评论

Automated Exploit Detection using Path Profiling The Disposition Should Matter, Not the Position 12

Automated Exploit Detection using Path Profiling <i>The Disp...

引用

12th International Joint Conference on E-Business and Telecommunications (ICETE)

作者： Stergiopoulos, George Petsanas, Panagiotis Katsaros, Panagiotis Gritzalis, Dimitris Athens Univ Econ & Business Dept Informat Informat Secur & Crit Infrastruct Protect INFOSEC Athens Greece Aristotle Univ Thessaloniki Dept Informat Thessaloniki Greece

ISBN: (纸本)9789897581403

Recent advances in static and dynamic program analysis resulted in tools capable to detect various types of security bugs in the Applications under Test (AUT). However, any such analysis is designed for a priori specified types of bugs and it is characterized by some rate of false positives or even false negatives and certain scalability limitations. We present a new analysis and source code classification technique, and a prototype tool aiming to aid code reviews in the detection of general information flow dependent bugs. Our approach is based on classifying the criticality of likely exploits in the source code using two measuring functions, namely Severity and Vulnerability. For an AUT, we analyse every single pair of input vector and program sink in an execution path, which we call an Information Block (IB). A classification technique is introduced for quantifying the Severity (danger level) of an IB by static analysis and computation of its Entropy Loss. An IB's Vulnerability is quantified using a tainted object propagation analysis along with a Fuzzy Logic system. Possible exploits are then characterized with respect to their Risk by combining the computed Severity and Vulnerability measurements through an aggregation operation over two fuzzy sets. An IB is characterized of a high risk, when both its Severity and Vulnerability rankings have been found to be above the low zone. In this case, a detected code exploit is reported by our prototype tool, called Entroine. The effectiveness of the approach has been tested by analysing 45 Java programs of NIST's Juliet Test Suite, which implement 3 different common weakness exploits. All existing code exploits were detected without any false positive.

关键词： code exploits Software Vulnerabilities Source code Classification Fuzzy Logic Tainted Object Propagation

来源：评论

学校读者我要写书评

暂无评论

Execution Path Classification for Vulnerability Analysis and Detection 1

引用

12th International Joint Conference on E-Business and Telecommunications (ICETE)

作者： Stergiopoulos, George Katsaros, Panagiotis Gritzalis, Dimitris AUEB Dept Informat Informat Secur & Crit Infrastruct Protect INFOSEC Athens Greece Aristotle Univ Thessaloniki Dept Informat GR-54006 Thessaloniki Greece

ISBN: (数字)9783319302225

ISBN: (纸本)9783319302225;9783319302218

Various commercial and open-source tools exist, developed both by the industry and academic groups, which are able to detect various types of security bugs in applications' source code. However, most of these tools are prone to non-negligible rates of false positives and false negatives, since they are designed to detect a priori specified types of bugs. Also, their analysis scalability to large programs is often an issue. To address these problems, we present a new source code analysis technique based on execution path classification. We develop a prototype tool to test our method's ability to detect different types of information-flow dependent bugs. Our approach is based on classifying the Risk of likely exploits inside source code execution paths using two measuring functions: Severity and Vulnerability. For an Application Under Test (AUT), we analyze every single pair of input vector and program sink in an execution path, which we call an Information Block (IB). Severity quantifies the danger level of an IB using static analysis and a variation of the Information Gain algorithm. On the other hand, an IB's Vulnerability rank quantifies how certain the tool is that an exploit exists on a given execution path. The Vulnerability function is based on tainted object propagation. The Risk of each IB is the combination of its computed Severity and Vulnerability measurements through an aggregation operation over two fuzzy sets using a Fuzzy Logic system. An IB is characterized of a high risk, when both its Severity and Vulnerability rankings have been found to be above the low zone. In this case, our prototype tool called Entroine reports a detected code exploit. The tool was tested on 45 Java vulnerable programs from NIST's Juliet Test Suite, which implement three different types of exploits. All existing code exploits were detected without any false positive.

关键词： code exploits Software vulnerabilities Source code classification Fuzzy logic Tainted object propagation

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：