Building up on SIDAN: improved and new invariants for a software hardening Frama-C plugin - DUMAS - Dépôt Universitaire de Mémoires Après Soutenance
Master Thesis Year : 2012

Building up on SIDAN: improved and new invariants for a software hardening Frama-C plugin

Abstract

We present improvements made on SIDAN, an intrusion detection system working at the software level. The operating principle of SIDAN consists in statically computing invariant properties of the targeted programs and in generating an instrumentation to check those properties at runtime, in order to detect attacks. More precisely, it focuses on invariants involving the values of variables of the program. It checks these invariants when calling functions. We present improvements on the existing invariants used by SIDAN and propose new invariants as well. We also describe how these have been implemented in SIDAN by using the Frama-C framework, and how they could improve its attack detection capabilities.
Fichier principal
Vignette du fichier
Karpman.pdf (463.46 Ko) Télécharger le fichier
Loading...

Dates and versions

dumas-00725206 , version 1 (24-08-2012)

Identifiers

  • HAL Id : dumas-00725206 , version 1

Cite

Pierre Karpman. Building up on SIDAN: improved and new invariants for a software hardening Frama-C plugin. Programming Languages [cs.PL]. 2012. ⟨dumas-00725206⟩
113 View
99 Download

Share

More