Product Lines Can Jeopardize Their Trade Secrets

Mathieu Acher 1 Guillaume Bécan 1 Benoit Combemale 1 Benoit Baudry 1 Jean-Marc Jézéquel 1
1 DiverSe - Diversity-centric Software Engineering
Inria Rennes – Bretagne Atlantique , IRISA-D4 - LANGAGE ET GÉNIE LOGICIEL
Abstract : What do you give for free to your competitor when you exhibit a product line? This paper addresses this question through several cases in which the discovery of trade secrets of a product line is possible and can lead to severe consequences. That is, we show that an outsider can understand the variability realization and gain either confidential business information or even some economical direct advantage. For instance, an attacker can identify hidden constraints and bypass the product line to get access to features or copyrighted data. This paper warns against possible naive mod-eling, implementation, and testing of variability leading to the existence of product lines that jeopardize their trade secrets. Our vision is that defensive methods and techniques should be developed to protect specifically variability – or at least further complicate the task of reverse engineering it.
Type de document :
Communication dans un congrès
10th Joint Meeting of the European Software Engineering Conference and the ACM SIGSOFT Symposium on the Foundations of Software Engineering, Aug 2015, Bergame, Italy. <10.1145/2786805.2803210>
Liste complète des métadonnées


https://hal.inria.fr/hal-01234342
Contributeur : Guillaume Bécan <>
Soumis le : mardi 1 décembre 2015 - 11:52:35
Dernière modification le : mercredi 2 août 2017 - 10:08:51
Document(s) archivé(s) le : mercredi 2 mars 2016 - 10:31:52

Fichier

fse15nier-nierid35-p-3ebab97-2...
Accord explicite pour ce dépôt

Identifiants

Citation

Mathieu Acher, Guillaume Bécan, Benoit Combemale, Benoit Baudry, Jean-Marc Jézéquel. Product Lines Can Jeopardize Their Trade Secrets. 10th Joint Meeting of the European Software Engineering Conference and the ACM SIGSOFT Symposium on the Foundations of Software Engineering, Aug 2015, Bergame, Italy. <10.1145/2786805.2803210>. <hal-01234342>

Partager

Métriques

Consultations de
la notice

668

Téléchargements du document

91