A proof-based approach to detect vulnerabilities in C programs - Archive ouverte HAL Access content directly
Conference Papers Year : 2011

A proof-based approach to detect vulnerabilities in C programs

Abstract

This paper presents a formal approach to detect vulnerabilities in a C program using the B formal method. Vulnerabilities denote faults that may be introduced unintentionally into programs making them behave incorrectly. Such faults (or programing errors) may lead to unpredictable behavior and even worse well-motivated attackers may exploit them later to cause real damage. Basically, the proposed approach consists in translating the vulnerable aspects of a C program into a B specification. On this B specification proof and model checking activities are performed in order to detect the presence or absence of vulnerabilities. Compared to the existing vulnerability detection techniques, a proof-based approach permits to eliminate false alarms and denial of service attacks
Fichier principal
Vignette du fichier
Mammar2011.pdf (113.17 Ko) Télécharger le fichier
Origin Files produced by the author(s)

Dates and versions

hal-01302477 , version 1 (24-02-2021)

Identifiers

  • HAL Id : hal-01302477 , version 1

Cite

Amel Mammar, Pengfei Liu. A proof-based approach to detect vulnerabilities in C programs. SERP 2011 : International Conference on Software Engineering Research and Practice, Jul 2011, Las Vegas, United States. pp.464 - 470. ⟨hal-01302477⟩
140 View
44 Download

Share

Gmail Mastodon Facebook X LinkedIn More