Software Vulnerability Detection Methodology Combined with Static and Dynamic Analysis
- Authors
- Kim, Seokmo; Kim, R. Young Chul; Park, Young B.
- Issue Date
- Aug-2016
- Publisher
- SPRINGER
- Keywords
- Vulnerability; Instrumentation; Fault injection; Model-to-text transformations
- Citation
- WIRELESS PERSONAL COMMUNICATIONS, v.89, no.3, pp.777 - 793
- Journal Title
- WIRELESS PERSONAL COMMUNICATIONS
- Volume
- 89
- Number
- 3
- Start Page
- 777
- End Page
- 793
- URI
- https://scholarworks.bwise.kr/hongik/handle/2020.sw.hongik/7519
- DOI
- 10.1007/s11277-015-3152-1
- ISSN
- 0929-6212
- Abstract
- Software vulnerability is the attack surface. Therefore, vulnerabilities innate in software should be detected for software security assurance. Vulnerability detection method can be divided into static vulnerability detection and dynamic vulnerability detection. Static vulnerability detection is more commonly used for vulnerability detection. This method has many benefits, but it also creates false positives. Therefore, this paper proposes a method to combine static and dynamic detection to reduce false positives created from static vulnerability detection. The proposed method verifies the vulnerability by implanting a fault, based on the information received from static code analysis.
- Files in This Item
- There are no files associated with this item.
- Appears in
Collections - 교학처 > 교양과(세종) > 1. Journal Articles
![qrcode](https://api.qrserver.com/v1/create-qr-code/?size=55x55&data=https://scholarworks.bwise.kr/hongik/handle/2020.sw.hongik/7519)
Items in ScholarWorks are protected by copyright, with all rights reserved, unless otherwise indicated.