A formalization-based vulnerability detection method for cross-subject network components

• Published in: IEEE ... International Conference on Trust, Security and Privacy in Computing and Communications (Online) pp. 1054 - 1059
• Main Authors: Chen, Jinfu, Xie, Haodi, Cai, Saihua, Geng, Ye, Yin, Yemin, Zhang, Zikang
• Format: Conference Proceeding
• Language: English
• Published: IEEE 01.12.2022
• Subjects: Analytical models; Buffer overflows; component testing; Computational modeling; cross-subject network components; Formal languages; formal verification; Privacy; Runtime; Software; vulnerability propagation

With the rapid development of computer technology, the cross-subject network components (CSNC) is widely used in software. However, the existing of vulnerabilities in CSNC may seriously affect the security of software, which attracts the attention of software tester. This paper proposes a formal-bas...