A proof-based approach to detect vulnerabilities in C programs - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2011

A proof-based approach to detect vulnerabilities in C programs

Résumé

This paper presents a formal approach to detect vulnerabilities in a C program using the B formal method. Vulnerabilities denote faults that may be introduced unintentionally into programs making them behave incorrectly. Such faults (or programing errors) may lead to unpredictable behavior and even worse well-motivated attackers may exploit them later to cause real damage. Basically, the proposed approach consists in translating the vulnerable aspects of a C program into a B specification. On this B specification proof and model checking activities are performed in order to detect the presence or absence of vulnerabilities. Compared to the existing vulnerability detection techniques, a proof-based approach permits to eliminate false alarms and denial of service attacks
Fichier principal
Vignette du fichier
Mammar2011.pdf (113.17 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-01302477 , version 1 (24-02-2021)

Identifiants

  • HAL Id : hal-01302477 , version 1

Citer

Amel Mammar, Pengfei Liu. A proof-based approach to detect vulnerabilities in C programs. SERP 2011 : International Conference on Software Engineering Research and Practice, Jul 2011, Las Vegas, United States. pp.464 - 470. ⟨hal-01302477⟩
137 Consultations
37 Téléchargements

Partager

Gmail Facebook X LinkedIn More