期刊文献+

计算机软件安全漏洞检测技术的应用研究 被引量:14

Research on Computer Software Security Flaw Detection Technology
在线阅读 下载PDF
导出
摘要 通信技术和计算机技术的发展使得计算机软件变得庞大复杂。计算机软件的弱点也日趋隐蔽。目前对软件安全的研究主要是设法编写安全的软件和如何去检测并消除软件中的弱点。本文主要从动态检测技术和静态检测技术两方面对现有的软件漏洞检测方法进行研究总结。 The development of communication technology and computer technology makes computer software become large and complex. Computer sottware vulnerabilities are becoming more and more subtle. The current research on sottware security is main- ly managed to write secure soft-ware and to detect and eliminate sol, ware vulnerabilities. This paper mainly summarizes the existing sotlware vulnerability detection method from two aspects: the dynamic detection technolo and static testin technology.
出处 《电脑与电信》 2013年第4期51-52,57,共3页 Computer & Telecommunication
关键词 漏洞检测 动态检测 静态检测 状态机 漏报 误报 leak detection: dynamic testing static testing state machine: missing report: false positives
  • 相关文献

参考文献6

二级参考文献20

  • 1李威远,陈新,刘发彪.基于ARM的无线图像传输系统的设计与实现[J].福州大学学报(自然科学版),2004,32(6):684-688. 被引量:8
  • 2蒋诚.信息安全漏洞等级定义标准及应用[J].信息安全与通信保密,2007,29(6):148-149. 被引量:15
  • 3Howard M, LeBlanc D, Viega J. 19 Deadly Sins of Software Security: Programming Flaws and How to Fix Them. USA.. McGraw-Hill Osborne Media, 2005
  • 4Sutton M, Greene A, Amini P. Fuzzing, Brute Force Vulnerability Discovery. USA: Addison-Wesley Professional, 2007
  • 5Chess B, West J. Secure Programming with Static Analysis. USA: Addison Wesley Professional, 2007
  • 6Chess B, McGraw G. Static analysis for security. IEEE Security: Privacy Magazine, 2004, 2(6): 76-79
  • 7Johnson R, Wagner D. Finding user/kernel pointer bugs with type inference//Proceedings of the 2004 USENIX Security Symposium. San Diego, CA, USA, 2004:119-134
  • 8Ashcraft K, Engler D. Using programmer-written compiler extensions to catch security holes//Proceedings of the 2002 IEEE Symposium on Security and Privacy. Oakland, CA, USA, 2002:143-159
  • 9Hallem S, Chelf B, Xie Y, Engler D. A system and language for building system-specific, static analyses//Proceedings of the 2002 ACM Conference on Programming Language Design and Implementation. Berlin, Germany, 2002:69-82
  • 10Cytron R, Ferrante J, Rosen B, Wegman M, Zadeck K. Efficiently computing static single assignment form and the control dependence graph. ACM Transactions on Programming Languages and Systems, 1991, 13(4): 451-490

共引文献41

同被引文献20

引证文献14

二级引证文献34

相关作者

内容加载中请稍等...

相关机构

内容加载中请稍等...

相关主题

内容加载中请稍等...

浏览历史

内容加载中请稍等...
;
使用帮助 返回顶部