Software Vulnerability Detection Methodology Combined with Static and Dynamic Analysis
DC Field | Value | Language |
---|---|---|
dc.contributor.author | Kim, Seokmo | - |
dc.contributor.author | Kim, R. Young Chul | - |
dc.contributor.author | Park, Young B. | - |
dc.date.available | 2020-07-10T05:50:32Z | - |
dc.date.created | 2020-07-06 | - |
dc.date.issued | 2016-08 | - |
dc.identifier.issn | 0929-6212 | - |
dc.identifier.uri | https://scholarworks.bwise.kr/hongik/handle/2020.sw.hongik/7519 | - |
dc.description.abstract | Software vulnerability is the attack surface. Therefore, vulnerabilities innate in software should be detected for software security assurance. Vulnerability detection method can be divided into static vulnerability detection and dynamic vulnerability detection. Static vulnerability detection is more commonly used for vulnerability detection. This method has many benefits, but it also creates false positives. Therefore, this paper proposes a method to combine static and dynamic detection to reduce false positives created from static vulnerability detection. The proposed method verifies the vulnerability by implanting a fault, based on the information received from static code analysis. | - |
dc.language | 영어 | - |
dc.language.iso | en | - |
dc.publisher | SPRINGER | - |
dc.subject | SECURITY | - |
dc.subject | SYSTEM | - |
dc.subject | TOOLS | - |
dc.title | Software Vulnerability Detection Methodology Combined with Static and Dynamic Analysis | - |
dc.type | Article | - |
dc.contributor.affiliatedAuthor | Park, Young B. | - |
dc.identifier.doi | 10.1007/s11277-015-3152-1 | - |
dc.identifier.scopusid | 2-s2.0-84949953159 | - |
dc.identifier.wosid | 000379353600006 | - |
dc.identifier.bibliographicCitation | WIRELESS PERSONAL COMMUNICATIONS, v.89, no.3, pp.777 - 793 | - |
dc.relation.isPartOf | WIRELESS PERSONAL COMMUNICATIONS | - |
dc.citation.title | WIRELESS PERSONAL COMMUNICATIONS | - |
dc.citation.volume | 89 | - |
dc.citation.number | 3 | - |
dc.citation.startPage | 777 | - |
dc.citation.endPage | 793 | - |
dc.type.rims | ART | - |
dc.type.docType | Article | - |
dc.description.journalClass | 1 | - |
dc.description.journalRegisteredClass | scie | - |
dc.description.journalRegisteredClass | scopus | - |
dc.relation.journalResearchArea | Telecommunications | - |
dc.relation.journalWebOfScienceCategory | Telecommunications | - |
dc.subject.keywordPlus | SECURITY | - |
dc.subject.keywordPlus | SYSTEM | - |
dc.subject.keywordPlus | TOOLS | - |
dc.subject.keywordAuthor | Vulnerability | - |
dc.subject.keywordAuthor | Instrumentation | - |
dc.subject.keywordAuthor | Fault injection | - |
dc.subject.keywordAuthor | Model-to-text transformations | - |
Items in ScholarWorks are protected by copyright, with all rights reserved, unless otherwise indicated.
94, Wausan-ro, Mapo-gu, Seoul, 04066, Korea02-320-1314
COPYRIGHT 2020 HONGIK UNIVERSITY. ALL RIGHTS RESERVED.
Certain data included herein are derived from the © Web of Science of Clarivate Analytics. All rights reserved.
You may not copy or re-distribute this material in whole or in part without the prior written consent of Clarivate Analytics.