Back to Search
Start Over
Confiance: detecting vulnerabilities in Java Card applets
- Source :
- ARES 2020: 15th International Conference on Availability, Reliability and Security, ARES 2020: 15th International Conference on Availability, Reliability and Security, Aug 2020, Dublin (effectué en visioconférence), Ireland. ⟨10.1145/3407023.3407031⟩, ARES
- Publication Year :
- 2020
- Publisher :
- HAL CCSD, 2020.
-
Abstract
- International audience; This study focuses on automatically detecting wrong implementations of specification in Java Card programs, without any knowledge on the source code or the specification itself. To achieve this, an approach based on Natural Language Processing and machine-learning is proposed. First, an oracle gathering methods with similar semantics in groups, is created. This focuses on evaluating our approach performances during the neighborhood discovery. Based on the groups automatically retrieved, the anomaly detection is based on Control Flow Graph of programs of these groups. In order to benchmark its ability to detect vulnerabilities, another oracle of vulnerabilities is created. This oracle knows every anomaly the approach should automatically retrieve. Both the neighborhood discovery and the anomaly detection are benchmarked using the precision, the recall and the F1 score metrics. Our approach is implemented in a tool: Confiance and it is compared to another machine-learning tool for automatic vulnerability detection. The results expose the better performances of Confiance over another approach in order to detect vulnerabilities in open-source programs available online.
- Subjects :
- 021110 strategic, defence & security studies
Source code
Computer science
Semantics (computer science)
media_common.quotation_subject
0211 other engineering and technologies
02 engineering and technology
computer.software_genre
Oracle
[INFO.INFO-CR]Computer Science [cs]/Cryptography and Security [cs.CR]
020204 information systems
0202 electrical engineering, electronic engineering, information engineering
Benchmark (computing)
Control flow graph
Anomaly detection
Data mining
Java Card
computer
Implementation
media_common
Subjects
Details
- Language :
- English
- Database :
- OpenAIRE
- Journal :
- ARES 2020: 15th International Conference on Availability, Reliability and Security, ARES 2020: 15th International Conference on Availability, Reliability and Security, Aug 2020, Dublin (effectué en visioconférence), Ireland. ⟨10.1145/3407023.3407031⟩, ARES
- Accession number :
- edsair.doi.dedup.....7e4f08483ec4963c7f4ade3bac658b3f