安全的软件开发:利用应用程序调用图表来检测安全漏洞
Lei Yan1, Guanghuai Zhao1, Xiaohui Li1
1State Grid Beijing Electric Power Company, Beijing, China.
PeerJ. Computer science
|February 3, 2025
概括
软件漏洞可能会损害加密完整性. 本研究提出了一种使用动态和静态分析来检测这些缺陷的新方法,从而提高应用程序的安全性.
科学领域:
- 计算机科学 计算机科学
- 网络安全 网络安全
- 软件工程 软件工程 软件工程
背景情况:
- 不一致的软件开发标准经常引入影响加密完整性的漏洞.
- 错误的加密过程和缺失的加密机制削弱了整体应用程序的安全性.
研究的目的:
- 引入一种强大的方法来检测加密应用程序中的漏洞.
- 通过改进漏洞检测来提高软件的安全性和弹性.
主要方法:
- 使用动态和静态分析技术.
- 开发一个分层和模块化模型来映射加密函数调用流.
- 采用加密函数统治树进行系统分析.
主要成果:
- 拟议的方法准确地识别和定位潜在的安全问题.
- 实验结果显示,漏洞检测的准确性和全面性有所提高.
- 这种方法提高了加密实现的安全性和弹性.
结论:
- 综合动态和静态分析方法有效检测加密漏洞.
- 密码函数主导树方法系统地将完整性破坏最小化.
- 这一策略显著加强了软件应用程序的安全态度.
相关概念视频
Guidelines and Strategies for Safe Computer Charting
797
The guidelines and strategies provided by the American Nurses Association (ANA) and the Canadian Nurses Association (CNA) offer essential principles for ensuring safe and secure computer charting systems in healthcare settings. Let's break down each recommendation:
Maintain Confidentiality and Security:
Maintain Confidentiality and Security:
797
Types of Errors: Detection and Minimization
1.4K
Error is the deviation of the obtained result from the true, expected value or the estimated central value. Errors are expressed in absolute or relative terms.
Absolute error in a measurement is the numerical difference from the true or central value. Relative error is the ratio between absolute error and the true or central value, expressed as a percentage.
Errors can be classified by source, magnitude, and sign. There are three types of errors: systematic, random, and gross.
Systematic or...
Absolute error in a measurement is the numerical difference from the true or central value. Relative error is the ratio between absolute error and the true or central value, expressed as a percentage.
Errors can be classified by source, magnitude, and sign. There are three types of errors: systematic, random, and gross.
Systematic or...
1.4K
Interpreting Run Charts
70
Run charts, essentially line graphs plotted over time, serve as fundamental yet effective tools for process analysis. They chronicle data sequentially, facilitating the identification of trends, shifts, or cyclical movements. This graphical representation is instrumental in determining whether a process is stable or exhibits signs of potential instability indicative of special cause variation. In the healthcare domain, run charts depict infection rates over time, enabling hospitals to monitor...
70
Signal Flow Graphs
161
Signal-flow graphs offer a streamlined and intuitive approach to representing control systems, providing an alternative to traditional block diagrams. These graphs use branches to symbolize systems and nodes to represent signals, effectively illustrating the relationships and interactions within the system.
In a signal-flow graph, branches denote the system's transfer functions, while nodes represent the signals. The direction of signal flow is indicated by arrows, with the corresponding...
In a signal-flow graph, branches denote the system's transfer functions, while nodes represent the signals. The direction of signal flow is indicated by arrows, with the corresponding...
161
Distribution Reliability and Automation
105
Distribution reliability in electrical power systems is critical for ensuring an uninterrupted power supply to consumers at minimal cost. According to IEEE Standard Terms, reliability is the probability that a device will function without failure over a specified time period or amount of usage. For electric power distribution, this translates to maintaining continuous power supply and addressing customer concerns over power outages. Several indices, as defined by IEEE Standard 1366-2012, are...
105
Sieve Analysis and Grading Curves
294
Sieve analysis is a method used to determine the particle size distribution of aggregate materials. This process involves the following steps:
294


