Desenvolvimento de um ambiente para análise de códigos-fonte com ênfase em segurança / Development of a source code analysis aid tool focusing on security

AUTOR(ES)
DATA DE PUBLICAÇÃO

2007

RESUMO

This work presents a proposal of a source code analysis aid tool focused on security. Its main goal is to help developers to find real vulnerabilities in their own software. Among the vulnerabilities that can be found in a software, buffer overflows have greater occurrence. There are several ways to exploit this vulnerability and some of them are stack smash, arc injection, pointer subterfuge. To address these vulnerabilities there are some approaches that try to mitigate these vulnerabilities or to minimize the impact generated when they are exploited. The approaches are divided into compiler-dependent, system-dependent and software-dependent. The proposed tool analyzes the source code of a software to find buffer overflows vulnerabilities through a preventive and software-dependent approach. To achieve it, the tool tries to supply limitations found in similar tools. The advantages of sintatic analysis to improve the buffer overflow identification and the development of a viable prototype of this tool will be shown in this work.

ASSUNTO(S)

programming languages software reability vulnerabilidade vulnerability confiabilidade de software verificação de programas security linguagens de programação segurança program verification

ACESSO AO ARTIGO

Documentos Relacionados