Building up on SIDAN: improved and new invariants for a software hardening Frama-C plugin - DUMAS - Dépôt Universitaire de Mémoires Après Soutenance Accéder directement au contenu
Mémoires Année : 2012

Building up on SIDAN: improved and new invariants for a software hardening Frama-C plugin

Résumé

We present improvements made on SIDAN, an intrusion detection system working at the software level. The operating principle of SIDAN consists in statically computing invariant properties of the targeted programs and in generating an instrumentation to check those properties at runtime, in order to detect attacks. More precisely, it focuses on invariants involving the values of variables of the program. It checks these invariants when calling functions. We present improvements on the existing invariants used by SIDAN and propose new invariants as well. We also describe how these have been implemented in SIDAN by using the Frama-C framework, and how they could improve its attack detection capabilities.
Fichier principal
Vignette du fichier
Karpman.pdf (463.46 Ko) Télécharger le fichier
Loading...

Dates et versions

dumas-00725206 , version 1 (24-08-2012)

Identifiants

  • HAL Id : dumas-00725206 , version 1

Citer

Pierre Karpman. Building up on SIDAN: improved and new invariants for a software hardening Frama-C plugin. Programming Languages [cs.PL]. 2012. ⟨dumas-00725206⟩
105 Consultations
94 Téléchargements

Partager

Gmail Facebook X LinkedIn More