arrow
Return

An Optimized Static Propositional Function Model to Detect Software Vulnerability

delete2019-01-01
delete5
delete
OA
AI
韩兰胜 (Lansheng Han)
周漫 (Man Zhou) *
Y
Yekui Qian *
C
Cai Fu
D
Deqing Zou
DOI:10.1109/ACCESS.2019.2943896delete
deleteOriginal
deleteShare
deleteSave
View PDF
Abstract

Abstract

En 中文
Due to the lack of appropriate theory to accurately characterize vulnerabilities, the current static detection technologies have two key challenges, i.e., limited applicability, and the problem of state space explosion. In this paper, we put forward a static detection model based on the proposition function. Furthermore, a new program intermediate representation called Vulnerability Executable Path Set (VEPS) is proposed to optimize our model which compresses the program state space distinctly. In addition, in order to confirm the reliability of the static detection model, we conduct three terms of contrast experiments to estimate the results with the vulnerability disclosed by NIST. The results obtained from extensive experiments show that the proposed model effectively detects more Wireshark bugs than NIST, and reveals a higher detection efficiency than FindBugs.
Keywords:
Execution path optimization
propositional function
static analysis
software vulnerability
AI Summary

AI Summary

Key information extracted from the uploaded paper, including a brief overview, abstract, background, key highlights, visual analysis, and future outlook.

Journal

IEEE Access cover
IEEE Access
IF:
3.6
Papers:
9.8W
Citations:
29.4W

Organization

No organization information available