A Dynamic Verification Model based on Information Flow Constraint
After analyzing the common attacks for some software systems, a dynamic software behavior verification model related with the unchecked input data based on software analysis and dynamic slicing technology is proposed. Regarding a statement as a basic analysis unit, and the information flow as the ma...
| Main Authors: | , , , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
Springer
2013-08-01
|
| Series: | International Journal of Computational Intelligence Systems |
| Subjects: | |
| Online Access: | https://www.atlantis-press.com/article/25868417.pdf |
| _version_ | 1818475533886816256 |
|---|---|
| author | Dan Wang Yan Lu Lihua Fu Wenbing Zhao |
| author_facet | Dan Wang Yan Lu Lihua Fu Wenbing Zhao |
| author_sort | Dan Wang |
| collection | DOAJ |
| description | After analyzing the common attacks for some software systems, a dynamic software behavior verification model related with the unchecked input data based on software analysis and dynamic slicing technology is proposed. Regarding a statement as a basic analysis unit, and the information flow as the main behavior of the software, the direction of the information flow of each statement is defined as its behavior specification, the information flow verification problem is converted into the verification for assigning variable address's validation. During the execution, behavior of the statements that use untrusted variable is monitored to verify whether the address modified by the statements belongs to the specification or not. If it is consistent with the specification, the execution of the statement is permitted. Based on the behavior model proposed, a method of extracting of the behavior specification was researched and a method of dynamic verification was designed. In order to prove for efficiency and performance of the model, the input data related behavior acquiring framework was implemented, and a set of tests were conducted. Preliminary results show the validity of the software's behavior model. |
| first_indexed | 2024-12-10T09:13:44Z |
| format | Article |
| id | doaj.art-b3c1b1ec9e0a4fc4a88f43e2bdaca2da |
| institution | Directory Open Access Journal |
| issn | 1875-6883 |
| language | English |
| last_indexed | 2024-12-10T09:13:44Z |
| publishDate | 2013-08-01 |
| publisher | Springer |
| record_format | Article |
| series | International Journal of Computational Intelligence Systems |
| spelling | doaj.art-b3c1b1ec9e0a4fc4a88f43e2bdaca2da2022-12-22T01:54:56ZengSpringerInternational Journal of Computational Intelligence Systems1875-68832013-08-016410.1080/18756891.2013.802878A Dynamic Verification Model based on Information Flow ConstraintDan WangYan LuLihua FuWenbing ZhaoAfter analyzing the common attacks for some software systems, a dynamic software behavior verification model related with the unchecked input data based on software analysis and dynamic slicing technology is proposed. Regarding a statement as a basic analysis unit, and the information flow as the main behavior of the software, the direction of the information flow of each statement is defined as its behavior specification, the information flow verification problem is converted into the verification for assigning variable address's validation. During the execution, behavior of the statements that use untrusted variable is monitored to verify whether the address modified by the statements belongs to the specification or not. If it is consistent with the specification, the execution of the statement is permitted. Based on the behavior model proposed, a method of extracting of the behavior specification was researched and a method of dynamic verification was designed. In order to prove for efficiency and performance of the model, the input data related behavior acquiring framework was implemented, and a set of tests were conducted. Preliminary results show the validity of the software's behavior model.https://www.atlantis-press.com/article/25868417.pdfprogramdynamicverificationinformation flow |
| spellingShingle | Dan Wang Yan Lu Lihua Fu Wenbing Zhao A Dynamic Verification Model based on Information Flow Constraint International Journal of Computational Intelligence Systems program dynamic verification information flow |
| title | A Dynamic Verification Model based on Information Flow Constraint |
| title_full | A Dynamic Verification Model based on Information Flow Constraint |
| title_fullStr | A Dynamic Verification Model based on Information Flow Constraint |
| title_full_unstemmed | A Dynamic Verification Model based on Information Flow Constraint |
| title_short | A Dynamic Verification Model based on Information Flow Constraint |
| title_sort | dynamic verification model based on information flow constraint |
| topic | program dynamic verification information flow |
| url | https://www.atlantis-press.com/article/25868417.pdf |
| work_keys_str_mv | AT danwang adynamicverificationmodelbasedoninformationflowconstraint AT yanlu adynamicverificationmodelbasedoninformationflowconstraint AT lihuafu adynamicverificationmodelbasedoninformationflowconstraint AT wenbingzhao adynamicverificationmodelbasedoninformationflowconstraint AT danwang dynamicverificationmodelbasedoninformationflowconstraint AT yanlu dynamicverificationmodelbasedoninformationflowconstraint AT lihuafu dynamicverificationmodelbasedoninformationflowconstraint AT wenbingzhao dynamicverificationmodelbasedoninformationflowconstraint |