Using testing techniques for vulnerability detection in C programs - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2011

Using testing techniques for vulnerability detection in C programs

Résumé

This paper presents a technique for vulnerability detection in C programs. It is based on a vulnerability formal model called "Vulnerability Detection Conditions" (VDCs). This model is used together with passive testing techniques for the automatic detection of vulnerabilities. The proposed technique has been implemented in a dynamic code analysis tool, TestInv-Code, which detects the presence of vulnerabilities on a given code, by checking dynamically the VDCs on the execution traces of the given program. The tool has been applied to several C applications containing some well known vulnerabilities to illustrate its effectiveness. It has also been compared with existing tools in the market, showing promising performances
Fichier principal
Vignette du fichier
978-3-642-24580-0_7_Chapter.pdf (257.34 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-01303013 , version 1 (15-04-2016)

Licence

Paternité

Identifiants

Citer

Amel Mammar, Ana Rosa Cavalli, Willy Ronald Jimenez Freitez, Wissam Mallouli, Edgardo Montes de Oca. Using testing techniques for vulnerability detection in C programs. 23th International Conference on Testing Software and Systems (ICTSS), Nov 2011, Paris, France. pp.80-96, ⟨10.1007/978-3-642-24580-0_7⟩. ⟨hal-01303013⟩
191 Consultations
550 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More