Towards designing an extendable vulnerability detection method for executable codes

2016 ◽  
Vol 80 ◽  
pp. 231-244
Author(s):  
Maryam Mouzarani ◽  
Babak Sadeghiyan
Keyword(s):  
Detection Method ◽  
Vulnerability Detection

scholarly journals Research on Vulnerability Detection for Software Based on Taint Analysis

2013 ◽  
Vol 347-350 ◽  
pp. 3715-3720
Author(s):  
Bei Hai Liang ◽  
Bin Bin Qu ◽  
Sheng Jiang ◽  
Chu Tian Ye
Keyword(s):  
Web Sites ◽  
Input Data ◽  
Web Applications ◽  
Detection Method ◽  
Prototype System ◽  
Vulnerability Detection ◽  
User Input ◽  
Finite State ◽  
Treat All ◽  
Cross Site

At present, Cross Site Scripting (XSS) vulnerability exists in most web sites. The main reason is the lack of effective validation and filtering mechanisms for user input data from web request. This paper explores vulnerability detection method which based on taint dependence analysis and implements a prototype system for Java Web program. We treat all user input as tainted data, and track the flow of Web applications, then we judge whether it will trigger an attack or not. The taint dependent analysis algorithm mentioned in this paper is used to construct the taint dependency graph. Next the value representation method of the string tainted object based on finite state automata is discussed. Finally, we propose the vulnerability detection method for the program. The experiment result shows that the prototype system can detect reflection cross-site scripting vulnerability well in those programs which dont have effective treatment for the user input data.

A novel vulnerability detection method for ZigBee MAC layer

2013 ◽  
Vol 4 (2/3) ◽  
pp. 134 ◽  
Author(s):  
Siwei Peng ◽  
Baojiang Cui ◽  
Ru Jia ◽  
Shurui Liang ◽  
Yiying Zhang
Keyword(s):  
Detection Method ◽  
Mac Layer ◽  
Vulnerability Detection
Sign in / Sign up

Export Citation Format

Share Document