Skip to Main content Skip to Navigation
Master Thesis

Building up on SIDAN: improved and new invariants for a software hardening Frama-C plugin

Abstract : We present improvements made on SIDAN, an intrusion detection system working at the software level. The operating principle of SIDAN consists in statically computing invariant properties of the targeted programs and in generating an instrumentation to check those properties at runtime, in order to detect attacks. More precisely, it focuses on invariants involving the values of variables of the program. It checks these invariants when calling functions. We present improvements on the existing invariants used by SIDAN and propose new invariants as well. We also describe how these have been implemented in SIDAN by using the Frama-C framework, and how they could improve its attack detection capabilities.
Complete list of metadata

Cited literature [19 references]  Display  Hide  Download

https://dumas.ccsd.cnrs.fr/dumas-00725206
Contributor : Co-Responsables Du Mri V. Gouranton Et S. Blazy <>
Submitted on : Friday, August 24, 2012 - 1:51:58 PM
Last modification on : Monday, February 15, 2021 - 10:50:58 AM
Long-term archiving on: : Sunday, November 25, 2012 - 2:31:30 AM

Identifiers

  • HAL Id : dumas-00725206, version 1

Citation

Pierre Karpman. Building up on SIDAN: improved and new invariants for a software hardening Frama-C plugin. Programming Languages [cs.PL]. 2012. ⟨dumas-00725206⟩

Share

Metrics

Record views

221

Files downloads

190