A proof-based approach to detect vulnerabilities in C programs - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2011

A proof-based approach to detect vulnerabilities in C programs

Résumé

This paper presents a formal approach to detect vulnerabilities in a C program using the B formal method. Vulnerabilities denote faults that may be introduced unintentionally into programs making them behave incorrectly. Such faults (or programing errors) may lead to unpredictable behavior and even worse well-motivated attackers may exploit them later to cause real damage. Basically, the proposed approach consists in translating the vulnerable aspects of a C program into a B specification. On this B specification proof and model checking activities are performed in order to detect the presence or absence of vulnerabilities. Compared to the existing vulnerability detection techniques, a proof-based approach permits to eliminate false alarms and denial of service attacks
Fichier principal
Vignette du fichier
Mammar2011.pdf (113.17 Ko) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-01302477 , version 1 (24-02-2021)

Identifiants

  • HAL Id : hal-01302477 , version 1

Citer

Amel Mammar, Pengfei Liu. A proof-based approach to detect vulnerabilities in C programs. SERP 2011 : International Conference on Software Engineering Research and Practice, Jul 2011, Las Vegas, United States. pp.464 - 470. ⟨hal-01302477⟩
140 Consultations
44 Téléchargements

Partager

Gmail Mastodon Facebook X LinkedIn More