Earticle

초록

영어

Regardless that the classic buffer overflow is a known and simple threat against software systems; security agencies still consider this threat as one of the most common software vulnerabilities. Aiming to increasing security resistance against this software threat, emphasize on software design phase is highly reasonable where cost and time required for fixing error in design level is several times lesser than coding or implementation levels. In this purpose, we use the Attack-based security analysis model for tracking and mitigating the classic buffer overflow during the software design phase. Through this model, we use known properties and behaviors of the buffer overflow to determine system vulnerabilities and address required security aspects. In this paper, we describe how to apply the Attack-based security analysis model for increasing security resistance against the classic buffer overflow. The main contribution of this work refers to showing capability of the Attack-based security analysis model in tracking and mitigating the classic buffer overflow into the software design phase in such a way that additional cost and time are not required for system analyzing and defining threat scenario.

목차

Abstract
 1. Introduction
 2. Similar works
  2.1. Direct security design
  2.2. Indirect security design
 3. The Attack-based security analysis
  3.1. Pre-process
  3.2. Security rules (threat grammar)
  3.3. Security evaluation
  3.4. Impact analysis
  3.5. Risk determination
 4. Results and discussions
 5. Conclusion
 References

키워드

저자

• Saman Hedayatpour [ Advanced Informations School, Universiti Teknologi Malaysia, International Campus, Kuala Lumpur, 54100, Malaysia ]
• Nazri Kama [ Advanced Informations School, Universiti Teknologi Malaysia, International Campus, Kuala Lumpur, 54100, Malaysia ]

참고문헌

발행기관

간행물

표지보기 관심저널 등록

• 간행물명

  International Journal of Software Engineering and Its Applications

• 간기

  월간

• pISSN

  1738-9984

• 수록기간

  2008~2016

• 등재여부

  SCOPUS

• 십진분류

  KDC 505 DDC 605