a practical covert channel identification approach in source code based on directed information flow graph
文献类型：会议论文
| 作者 | Wu JingZheng ; Ding Liping ; Wang Yongji ; Han Wei |
| 出版日期 | 2011 |
| 会议名称 | 2011 5th International Conference on Secure Software Integration and Reliability Improvement, SSIRI 2011 |
| 会议日期 | 27-Jun-02 |
| 会议地点 | Jeju Island, Korea, Republic of |
| 关键词 | Algorithms Building codes Computer operating systems Computer programming languages Graphic methods Software reliability |
| 页码 | 98-107 |
| 英文摘要 | Covert channel analysis is an important requirement when building secure information systems and identification is the most difficult task. Although some approaches were presented they are either experimental or constrained to some particular systems. This paper presents a practical approach based on directed information flow graph taking advantage of the source code analysis. The approach divides the whole system into serval independent modules and analyzes them respectively. All the shared variables and their caller functions are found out from the source codes and modeled into directed information flow graphs. When the information flow branches are visible and modifiable to the external interface a potential covert channel exists. Contributions made in this paper are as follows a modularized analysis scheme is proved and reduces the workloads of identifying a directed information flow graph algorithm is presented and used to model the covert channels more than 30 covert channels have been identified in Linux kernel source code using this scheme and a typical channel scenario is constructed. © 2011 IEEE. |
| 收录类别 | EI |
| 会议主办者 | Korea Software Engineering Society |
| 会议录 | Proceedings - 2011 5th International Conference on Secure Software Integration and Reliability Improvement, SSIRI 2011
 |
| 会议录出版地 | United States |
| ISBN号 | 9780769544533 |
| 源URL | [http://124.16.136.157/handle/311060/14377]  |
| 专题 | 软件研究所_互联网软件技术实验室 _会议论文 |
| 推荐引用方式 GB/T 7714 | Wu JingZheng,Ding Liping,Wang Yongji,et al. a practical covert channel identification approach in source code based on directed information flow graph[C]. 见:2011 5th International Conference on Secure Software Integration and Reliability Improvement, SSIRI 2011. Jeju Island, Korea, Republic of. 27-Jun-02. |
入库方式： OAI收割
来源：软件研究所
浏览0
下载0
收藏0
其他版本
除非特别说明，本系统中所有内容都受版权保护，并保留所有权利。