43 search results - page 5 / 9 » Retrofitting Legacy Code for Security |
KBSE
2007
IEEE
14 years 1 months ago
2007
IEEE
We present tools to support model-based security engineering on both the model and the code level. In the approach supported by these tools, one firstly specifies the securitycr...
WWW
2004
ACM
14 years 8 months ago
2004
ACM
Security remains a major roadblock to universal acceptance of the Web for many kinds of transactions, especially since the recent sharp increase in remotely exploitable vulnerabil...
ISSE
2010
13 years 5 months ago
2010
We present a framework, called AIR, for verifying safety properties of assembly language proa software model checking. AIR extends the applicability of predicate abstraction and x...
CCS
2010
ACM
13 years 6 months ago
2010
ACM
We present the first sound program transformation approach for automatically transforming the code of a legacy web application to employ PREPARE statements in place of unsafe SQL...
PLDI
2009
ACM
14 years 8 months ago
2009
ACM
The serious bugs and security vulnerabilities facilitated by C/C++'s lack of bounds checking are well known, yet C and C++ remain in widespread use. Unfortunately, C's a...