A Dynamic Verification Model based on Information Flow Constraint

DOI

10.1080/18756891.2013.802878How to use a DOI?

Keywords

program, dynamic, verification, information flow

Abstract

After analyzing the common attacks for some software systems, a dynamic software behavior verification model related with the unchecked input data based on software analysis and dynamic slicing technology is proposed. Regarding a statement as a basic analysis unit, and the information flow as the main behavior of the software, the direction of the information flow of each statement is defined as its behavior specification, the information flow verification problem is converted into the verification for assigning variable address's validation. During the execution, behavior of the statements that use untrusted variable is monitored to verify whether the address modified by the statements belongs to the specification or not. If it is consistent with the specification, the execution of the statement is permitted. Based on the behavior model proposed, a method of extracting of the behavior specification was researched and a method of dynamic verification was designed. In order to prove for efficiency and performance of the model, the input data related behavior acquiring framework was implemented, and a set of tests were conducted. Preliminary results show the validity of the software's behavior model.

Copyright

© 2017, the Authors. Published by Atlantis Press.

Open Access

This is an open access article distributed under the CC BY-NC license (http://creativecommons.org/licenses/by-nc/4.0/).

Download article (PDF)

TY  - JOUR
AU  - Dan Wang
AU  - Yan Lu
AU  - Lihua Fu
AU  - Wenbing Zhao
PY  - 2013
DA  - 2013/07/01
TI  - A Dynamic Verification Model based on Information Flow Constraint
JO  - International Journal of Computational Intelligence Systems
SP  - 712
EP  - 723
VL  - 6
IS  - 4
SN  - 1875-6883
UR  - https://doi.org/10.1080/18756891.2013.802878
DO  - 10.1080/18756891.2013.802878
ID  - Wang2013
ER  -