检索结果-内蒙古大学图书馆

5th IEEE European Symposium on Security and Privacy (IEEE Euro S and P)

作者： Rossi, Maria Teresa Greca, Renan Iovino, Ludovico Giacinto, Giorgio Bertoli, Antonia Gran Sasso Sci Inst Laquila Italy CNR ISTI Pisa Italy Univ Cagliari Cagliari Italy

ISBN: (纸本)9781728185972

Cybersecurity has become a real issue in the development of smart services in the smart home domain, which is formed by a System of Systems where several smart objects are connected to each other and to the Internet. However, these connections expose the devices to possible attackers inside or outside the network, who may exploit software or hardware vulnerabilities to achieve malicious goals. To alleviate this issue, the use of defensive programming assertions can allow the behaviour of smart objects to be monitored and checked for correctness. Furthermore, open source intelligence tools, such as the Shodan search engine, provide features that could be leveraged to detect potential vulnerabilities. In this paper, we propose an approach for the monitoring of Systems of Systems in the smart home domain exploiting the defensive programming paradigm in combination with Shodan APIs.

关键词： Cybersecurity defensive programming Shodan Smart home SoS

来源：评论

学校读者我要写书评

暂无评论

The implementation of generic smart pointers for advanced defensive programming

引用

SOFTWARE-PRACTICE & EXPERIENCE 2004年第10期34卷 977-1009页

作者： Savidis, A Fdn Res & Technol Hellas Inst Comp Sci GR-71110 Iraklion Greece

Smart pointers denote a well-known technique for collective resource ownership, e.g. sharing dynamic object instances, while usually supporting automatic garbage collection based on reference counting. The original method has been retargeted to serve as a generic defensive programming method for 'exhaustive tracking' of erroneous pointer use in C++. Automatic bug tracking is supported in a unified manner both for pointers to heap memory, i.e. free storage, as well as for pointers to stack or global memory, i.e. auto or static storage. Overall, the presented technique (a) offers a simple contract for memory allocation and use;(b) supports type and indirection depth genericity;(c) implements most operators supported for built-in pointers with embedded bug defense;(d) offers an alternative way of employing a garbage collection facility for memory leak detection;and (e) provides an appropriate collection of utility macros, through which defensive pointers should be used, with an alternative version re-targeted to normal native pointers. Copyright (C) 2004 John Wiley Sons, Ltd.

关键词： smart pointers defensive programming garbage collection memory management recursive meta-programming

来源：评论

学校读者我要写书评

暂无评论

Application invariants: Design by Contract augmented with deployment correctness logic

引用

SOFTWARE-PRACTICE & EXPERIENCE 2006年第3期36卷 255-282页

作者： Savidis, A Fdn Res & Technol Hellas Inst Comp Sci GR-71110 Iraklion Crete Greece

Design by Contract is a method for the development of robust object-oriented software, introducing class invariants as conditions corresponding to the design axioms that should be satisfied by every valid instance of a class. Additionally, the method states formally the way client programs should correctly utilize supplier classes, so that the composition of correct programs may be accomplished. However, the contextual correctness of supplier instances within client programs, only reflected in the client-specific semantics for supplier-class deployment, cannot be expressed through Design by Contract. For instance, supplier instances satisfying the supplier class invariant may not constitute plausible supplier instances in the context of a particular client program. In this context, we introduce application invariants as an extension to Design by Contract, for hosting the contextual-correctness logic for supplier instances, as conditionally defined by client programs. This allows stronger validation of supplier instances, through the dynamic encapsulation of client-specific acceptance filtering, enabling more intensive defect detection. Application invariants are implemented in the context of client classes as methods utilizing correctness condition expressions, are dynamically hosted within supplier instances, while always called by supplier instances when the basic supplier-class invariant test is performed. Copyright (c) 2005 John Wiley & Sons, Ltd.

关键词： Design by Contract defensive programming embedded correctness checking application invariants

来源：评论

学校读者我要写书评

暂无评论

TOOLS OF THE TRADE First, Do No Harm

引用

IEEE SOFTWARE 2014年第5期31卷 12-14页

作者： Spinellis, Diomidis Athens Univ Econ & Business Dept Management Sci & Technol Athens Greece

When we maintain existing code, we must be very careful to avoid breaking or degrading the system we're working on. During development, we can minimize problems through reviews, adherence to style rules, defensive programming, maintenance of backward compatibility, and the preservation of architectural properties. Thorough testing at all levels can catch many issues before they reach the deployment stage. Finally, during deployment, a phased rollout, a back-off plan, and careful planning can minimize the occurrence of catastrophic failures. The Web extra at http://***/pifgzfFXanE is an audio podcast of the Tools of the Trade column in which author Diomidis Spinellis discusses how we must be very careful to avoid breaking or degrading the system while working to maintain existing code.

关键词： Software Architecture Software Maintenance Code Maintenance Code Development defensive programming Backward Compatibility Code Architectural Properties Software Engineering Software Testing Codes Computer Applicaitons programming Maintenance defensive programming Testing Deployment Operations Reviews Software Engineering

来源：评论

学校读者我要写书评

暂无评论

SPLICE: Efficiently Removing a User's Data from In-memory Application State 23

SPLICE: Efficiently Removing a User's Data from In-memory Ap...

引用

30th ACM SIGSAC Conference on Computer and Communications Security (ACM CCS)

作者： Han, Xueyuan Mickens, James Sen, Siddhartha Wake Forest Univ Winston Salem NC 27101 USA Harvard Univ Cambridge MA 02138 USA Microsoft Res New York NY USA

ISBN: (纸本)9798400700507

SPLICE is a new programming framework that allows security-conscious applications to efficiently locate and delete a user's in-memory state. The core technical challenge is determining how to delete a user's memory values without breaking application-specific semantic invariants involving the memory state of remaining users. SPLICE solves this problem using three techniques: taint tracking (which traces how a user's data flows through memory), deletion by synthesis (which overwrites each user-owned memory value in place, replacing it with a value that preserves the symbolic constraints of enclosing data structures), and a novel type system (which forces applications to employ defensive programming to avoid computing over synthesize-deleted values in unsafe ways). Using four realistic applications that we ported to SPLICE, we show that SPLICE's type system and defensive programming requirements are not onerous for developers. We also demonstrate that SPLICE's run-time overheads are similar to those of prior taint tracking systems, while enabling strong deletion semantics.

关键词： In-memory deletion taint tracking constraint solvers data structures defensive programming

来源：评论

学校读者我要写书评

暂无评论

Effective Learning of Cybersecurity Concepts with Model- Eliciting Activities

Effective Learning of Cybersecurity Concepts with Model- Eli...

引用

IEEE International Conference on Engineering, Technology and Education (IEEE TALE)

作者： Earwood, Brandon Yang, Jeong Kim, Young Rae Texas A&M Univ Dept Comp & Cyber Secur San Antonio TX 78224 USA Texas A&M Univ Dept Curriculum & Instruct San Antonio TX USA

ISBN: (纸本)9781665436878

As security is a crucial aspect in the process of developing software systems, software engineers must have a strong understanding of security concepts for an application being developed and tested. There has been a growing demand for these skills to be taught on all knowledge levels in computing courses. This paper builds on a study related to a series of security modules designed to meet that demand for teaching security concepts to students in computer science courses. Six small lessons in three security modules are implemented into a CS2 course, and the outcomes of this implementation are assessed. Each concept in the modules is broken up into a general description of the security problem, sample code written in Java, and sample code of the solution. Along with the security modules, an open-ended, problem-solving Model-Eliciting Activity (MEA) was developed as a project for students to demonstrate an understanding of the security concepts. Experimental studies were conducted to investigate the teaching effectiveness of implementing cyber security modules with the MEA project and students' experiences in conceptual modeling tasks in problem solving. After implementing the security modules with the MEA, students showed a good understanding of cyber security concepts, and the instructor's beliefs about teaching shifted from teacher-centered to student-centered. 41.7% of the developed solutions from the MEA groups showed a sufficient degree of creativity, and 58.3% of the solutions seemed suitable for real-world implementation. The initial activities leading to student developed solutions effectively prepared students within the scope of the course, but additional discussion and resources may be necessary to expand on creativity and practicality.

关键词： cybersecurity cybersecurity education computer science education model-eliciting activity MEA cipher Java CS2 defensive programming

来源：评论

学校读者我要写书评

暂无评论

Teaching Design-by-Contract for the Modeling and Implementation of Software Systems 14

Teaching Design-by-Contract for the Modeling and Implementat...

引用

14th International Conference on Software Technologies (ICSOFT)

作者： Ozkaya, Mert Yeditepe Univ Dept Comp Engn Istanbul Turkey

ISBN: (纸本)9789897583797

defensive programming is considered as a software design approach that promotes the reliable software development via the considerations of different cases for the software modules. Design-by-Contract (DbC) applies defensive programming systematically in terms of contracts that are a pair of pre-conditions on the module input and post-conditions on the module output. In this paper, a DbC-based teaching methodology is proposed, which aims to teach undergraduate students how to use contracts for the modeling and implementation of software systems. The teaching methodology consists of three consecutive steps. Firstly, the students will learn how to model software architectures in terms of components and their communication links. The component behaviours are specified as contracts, which are attached to the messages that the components exchange. In the second step, the students will learn how to implement the contractual software architectures in Java using Java's assertion mechanisms in a way that the contractual design decisions are all preserved in the code. Lastly, the students will learn the Java Modeling Language for combining the contractual modeling and Java implementation in a single model to avoid any inconsistencies between the model and implementation and automatically verify the correctness of the implementation against the modeled behaviours.

关键词： Java Modeling Language defensive programming Design-by-Contract Education

来源：评论

学校读者我要写书评

暂无评论

Developing fault tolerant software in ada for real-time dependable systems 2nd

Developing fault tolerant software in ada for real-time depe...

引用

2nd International Eurospace-Ada-Europe Symposium, Ada in Europe 1995

作者： David, P. Planche, T. Correge, A. Chane, J.F. Matra Marconi Space Toulouse France

来源：评论

学校读者我要写书评

暂无评论

Creating defensive Programmers : Evaluating the Impact of Adding Cybesecurity Topics to Core Computer Science Courses 23

Creating Defensive Programmers : Evaluating the Impact of Ad...

引用

Proceedings of the 2023 ACM Conference on International Computing Education Research - Volume 2

作者： Cheryl Resch University of Florida United States of America

ISBN: (纸本)9781450399753

The research described in this summary explores whether adding defensive programming topics to the Computer Science (CS) curriculum produces graduates who understand and appreciate the risks associated with software vulnerabilities, and who create software free of common vulnerabilities. defensive programming lectures and assignments have been developed and added to core CS courses. The assignments teach how common vulnerabilities are exploited and how the vulnerabilities can be mitigated. To explore whether these assignments enhance the students’ knowledge and practice, several forms of data collection are done. Students will be required to static test code for class projects for vulnerabilities. Data on the number and type of vulnerabilities will be collected. The trends in the number and types of vulnerabilities over three semesters will give insight into whether the addition of defensive programming topics results in students creating software with fewer vulnerabilities. A survey with multiple choice questions on cybersecurity topics, and free response questions on interest and relevance of cybersecurity will also be given to students in four different core CS courses over three semesters. A multiple linear regression analysis will be performed to determine how survey scores are affected by a student’s progress in the curriculum. The change in regression coefficients will give insight into whether adding defensive programming topics throughout the curriculum is having the desired effect and producing graduates who with a greater understanding of defensive programming. NLP analysis of responses to reflection prompts and free response survey question will give insight into students’ attitude toward defensive programming, and whether they appreciate the need to incorporate defensive programming habits.

关键词： Cybersecurity defensive programming Undergraduate education

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：