Application of Contract-based Security Assertion Monitoring Framework for Telecommunications Software Engineering - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Article Dans Une Revue Mathematical and Computer Modelling Année : 2011

Application of Contract-based Security Assertion Monitoring Framework for Telecommunications Software Engineering

Résumé

Telecommunication software systems, containing security vulnerabilities, continue to be created and released to consumers. We need to adopt improved software engineering practices to reduce the security vulnerabilities in modern systems. Contracts can provide a useful mechanism for the identification, tracking, and validation of security vulnerabilities. In this work, we propose a new contract-based security assertion monitoring framework (CB_SAMF) that is intended to reduce the number of security vulnerabilities that are exploitable across multiple software layers, and to be used in an enhanced systems development life cycle (SDLC). We show how contract-based security assertion monitoring can be achieved in a live environment on Linux. Through security activities integrated into the SDLC we can identify potential security vulnerabilities in telecommunication systems, which in turn are used for the creation of contracts defining security assertions. Our contract model is then applied, as runtime probes, against two common security related vulnerabilities in the form of a buffer overflow and a denial of service.

Dates et versions

inria-00550579 , version 1 (28-12-2010)

Identifiants

Citer

Alexander M. Hoole, Issa Traoré, Isabelle Simplot-Ryl. Application of Contract-based Security Assertion Monitoring Framework for Telecommunications Software Engineering. Mathematical and Computer Modelling, 2011, 53 (3-4), pp.522--537. ⟨10.1016/j.mcm.2010.03.038⟩. ⟨inria-00550579⟩
63 Consultations
0 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More