Static Program Analysis for Bug and Security Vulnerability Checking of Systems Code
Zusammenfassung
| Was | Static Program Analysis for Bug and Security Vulnerability Checking of Systems Code |
|---|---|
| Wer | Dr. Bernhard SCHOLZ, The University of Sydney, NSW, Australia |
| Wo | TU Wien, Bibliothek E185.1, Argentinierstr. 8, 4. Stock (Mitte) |
| Wann |
26/02/09
15:00 |
| Link | http://www.cs.usyd.edu.au/~scholz/ |
Details
Der Arbeitsbereich für Programmiersprachen und Übersetzer am Institut für Computersprachen lädt ein.
Abstract
A security vulnerability is a software bug that can be exploited by an external attacker. Security vulnerabilities expose a major threat for operating systems and programs that are executed with higher privileges, as an attacker can gain total control over a computer system by exploiting vulnerabilities. Even in a rigid software development process, bugs are introduced that may result in severe security vulnerabilities. This is especially true for large legacy systems written in C and C++.Manual code inspections are the predominant approach to find security vulnerabilities. These inspections are time-consuming, repetitive and tedious. They can never be complete or time-effective, particularly in light of the large code-bases of software systems these days (thousands to millions of lines of code). Static bug checking tools that rely on sound program analyses, promise a solution to this problem. However, designing and implementing precise and scalable program analyses is still a big challenge.
In this talk I will report on my work conducted at the Sun Microsystems Laboratories in 2007/08. I will give an overview of our new project, Parfait; a static, layered program analysis framework for checking bugs in C systems code. The framework is coupled with security domain knowledge to better cater for security vulnerabilities in large systems code. The framework was designed to provide better precision of bugs (less false positives), be scalable (produce results for millions of lines of code in a run-time efficient manner), and support security vulnerability analysis.