A study of vulnerability assessment using fuzzing data suite and data flow analysis in software
DC Field | Value | Language |
---|---|---|
dc.contributor.author | 박재표 | - |
dc.contributor.author | 전문석 | - |
dc.contributor.author | Song, J.-H. | - |
dc.date.available | 2018-05-08T00:20:04Z | - |
dc.date.created | 2018-04-18 | - |
dc.date.issued | 2016-09 | - |
dc.identifier.issn | 1936-6612 | - |
dc.identifier.uri | http://scholarworks.bwise.kr/ssu/handle/2018.sw.ssu/5734 | - |
dc.description.abstract | Recently, there are many studies about infringement protection such as analysis study of potential abuse of weak point and researches for weak point of software. This study provide with Exploitable assessment method based on the data flow analysis and software clash analysis for the exploit prediction. This method analyze the limitation of existing clash analysis and the characteristics of existing data flow analysis, and improve the traceability of access violation clash weak point based on the relativity of functional unit by analyzing unit area of clash analysis and data flow analysis. In order to achieve this, I extracted the fuzzing data format, mapped data format to the knot of Dependency structure matrices based data flow analysis, and conducted the examination if the reading access violation from functions connected to clash was related to the clash value. The proposed method adapted functional flow analysis of software to weak point analysis method to overcome the excessive exhaustion of resources in overall flow analysis of software, related the dynamic-based analysis result such as fuzzing and taint analysis, which finally is able to extract the base data for assessment Exploitable. © 2016 American Scientific Publishers. All rights reserved. | - |
dc.language | 영어 | - |
dc.language.iso | en | - |
dc.publisher | American Scientific Publishers | - |
dc.relation.isPartOf | Advanced Science Letters | - |
dc.title | A study of vulnerability assessment using fuzzing data suite and data flow analysis in software | - |
dc.type | Article | - |
dc.identifier.doi | 10.1166/asl.2016.7809 | - |
dc.type.rims | ART | - |
dc.identifier.bibliographicCitation | Advanced Science Letters, v.22, no.9, pp.2592 - 2597 | - |
dc.description.journalClass | 1 | - |
dc.identifier.scopusid | 2-s2.0-85019980738 | - |
dc.citation.endPage | 2597 | - |
dc.citation.number | 9 | - |
dc.citation.startPage | 2592 | - |
dc.citation.title | Advanced Science Letters | - |
dc.citation.volume | 22 | - |
dc.contributor.affiliatedAuthor | 박재표 | - |
dc.contributor.affiliatedAuthor | 전문석 | - |
dc.type.docType | Article | - |
dc.description.isOpenAccess | N | - |
dc.subject.keywordAuthor | Dependency structure matrices | - |
dc.subject.keywordAuthor | Exploitable assessment | - |
dc.subject.keywordAuthor | Software crash analysis | - |
dc.subject.keywordAuthor | Taint analysis | - |
dc.subject.keywordAuthor | Vulnerability | - |
dc.description.journalRegisteredClass | scopus | - |
Items in ScholarWorks are protected by copyright, with all rights reserved, unless otherwise indicated.
Soongsil University Library 369 Sangdo-Ro, Dongjak-Gu, Seoul, Korea (06978)02-820-0733
COPYRIGHT ⓒ SOONGSIL UNIVERSITY, ALL RIGHTS RESERVED.
Certain data included herein are derived from the © Web of Science of Clarivate Analytics. All rights reserved.
You may not copy or re-distribute this material in whole or in part without the prior written consent of Clarivate Analytics.