A Model for Security Vulnerability Pattern

机译：安全漏洞模式模型

获取原文

获取原文并翻译 | 示例

页面导航

摘要
著录项
相似文献
相关主题

摘要

Static analysis technology is used to find programming errors before run time. Unlike dynamic analysis technique which looks at the application state while it is being executed, static analysis technique does not require the application to be executed. In this paper, we classify security vulnerability patterns in source code and design a model to express various security vulnerability patterns by making use of pushdown automata. On the basis of the model, it is possible to find a security vulnerability by making use of Abstract Syntax Tree (AST) based pattern matching technique in parsing level.

机译：静态分析技术用于在运行时发现编程错误。与动态分析技术不同，后者在执行过程中会查看应用程序状态，而静态分析技术则不需要执行应用程序。在本文中，我们将源代码中的安全漏洞模式分类，并设计一个模型来利用下推自动机表达各种安全漏洞模式。基于该模型，可以通过在解析级别使用基于抽象语法树（AST）的模式匹配技术来发现安全漏洞。

著录项

来源
《International Conference on Computational Science and Its Applications(ICCSA 2006) pt.3; 20060508-11; Glasgow(GB)》|2006年|P.385-394|共10页
会议地点 Glasgow(GB)
作者
Hyungwoo Kang; Kibom Kim; Soonjwa Hong; Dong Hoon Lee;
展开▼
作者单位

National Security Research Institute, 161Gajeong-dong, Yuseong-gu, Daejeon, 305-350, Korea;

展开▼
会议组织
原文格式 PDF
正文语种 eng
中图分类计算技术、计算机技术;
关键词
static analysis; software security; buffer overflow; abstract syntax tree (AST); pushdown automata (PDA);

机译：静态分析;软件安全性;缓冲区溢出;抽象语法树（AST）;下推自动机（PDA）;

相似文献

外文文献
中文文献
专利

1. Where the rain falls: evidence from 8 countries on how vulnerable households use migration to manage the risk of rainfall variability and food insecurity. (Special Issue: Connections between (changing) rainfall patterns, food and livelihood security, and human mobility: evidence and a new analytical framework.) [J] . Warner K., Afifi T. Climate and Development . 2014,第1期

机译：降雨的地方：来自8个国家的证据表明，脆弱家庭如何利用移民来管理降雨多变性和粮食不安全的风险。（特刊：（不断变化的）降雨模式，粮食和生计安全与人类流动之间的联系：证据和新的分析框架。）
2. Clouds gather in the sky, but no rain falls. Vulnerability to rainfall variability and food insecurity in Northern Bangladesh and its effects on migration. (Special Issue: Connections between (changing) rainfall patterns, food and livelihood security, and human mobility: evidence and a new analytical framework.) [J] . Etzold B., Ahmed A. U., Hassan S. R., Climate and Development . 2014,第1期

机译：天空中乌云密布，没有雨落。孟加拉国北部易受降雨变化和粮食不安全的影响，并对其迁移产生影响。（特刊：（不断变化的）降雨模式，粮食和生计安全与人类流动之间的联系：证据和新的分析框架。）
3. A study examining relationships between micro patterns and security vulnerabilities [J] . Vladimir Mencl Computing reviews . 2021,第1期

机译：研究微观模式与安全漏洞之间的关系
4. Vulnerability-Based Security Pattern Categorization in Search of Missing Patterns [C] . Anand Priya, Ryoo Jungwoo, Kazman Rick International conference on availability, reliability and security . 2014

机译：搜索缺失模式的基于漏洞的安全模式分类
5. An assessment of Cloud models against security vulnerabilities using a semi-automated vulnerability test model. [D] . Algamdi, Abdullah M. 2014

机译：使用半自动漏洞测试模型针对安全漏洞评估云模型。
6. Designing an Agent-Based Model Using Group Model Building: Application to Food Insecurity Patterns in a U.S. Midwestern Metropolitan City [O] . Keumseok Koh, Rebecca Reno, Ayaz Hyder 2018

机译：使用组模型构建设计基于代理的模型：在美国中西部大城市的食品不安全模式中的应用
7. Finding Security Patterns to Countermeasure Software Vulnerabilities [O] . Borstad Ole Gunnar 2008

机译：查找安全模式以应对软件漏洞
8. Retirement Security: Trends in Marriage and Work Patterns May Increase Economic Vulnerability for Some Retirees. [R] . 2014

机译：退休保障：婚姻和工作模式的趋势可能会增加一些退休人员的经济脆弱性。

A Model for Security Vulnerability Pattern

摘要

著录项

相似文献

相关主题

期刊订阅