Search

Your search keyword '"undocumented features"' showing total 2 results
Start Over Descriptor "undocumented features" Language russian
2 results on '"undocumented features"'

1. THE EXPERIENCE OF COMPARISON OF STATIC SECURITY CODE ANALYZERS

Author

Alexey Markov, Andrew Fadin, Vladislav Shvets, and Valentin Tsirlov

Subjects
information security, software security, static analysis, code vulnerabilities, security weaknesses, undocumented features, program testing, security audit, Construction industry, HD9715-9717.5
Abstract

This work presents a methodological approach to comparison of static security code analyzers. It substantiates the comparison of the static analyzers as to efficiency and functionality indicators, which are stipulated in the international regulatory documents. The test data for assessment of static analyzers efficiency is represented by synthetic sets of open-source software, which contain vulnerabilities. We substantiated certain criteria for quality assessment of the static security code analyzers subject to standards NIST SP 500-268 and SATEC. We carried out experiments that allowed us to assess a number of the Russian proprietary software tools and open-source tools. We came to the conclusion that it is of paramount importance to develop Russian regulatory framework for testing software security (firstly, for controlling undocumented features) and evaluating the quality of static security code analyzers.

Published
2015

2. Analysis of undocumented features of Windows drivers

Subjects
драйверы windows, undocumented features, information security, windows security, информационная безопасность, безопасность windows, binary code analysis, анализ бинарного кода, windows drivers, недокументированные возможности
Abstract

В настоящей выпускной квалификационной работе представлен метод выявления опасных недокументированных возможностей (НДВ) в драйверах ОС Windows на основе методов анализа бинарного кода. В работе проанализированы способы атак с использованием НДВ драйверов Windows, на основании чего выявлены опасные функции, а также предложен метод их обнаружения с использованием выбранных методов анализа бинарного кода и реализован его прототип. Результаты экспериментальной оценки эффективности разработанного метода приведены и демонстрируют высокую вероят-ность обнаружения НДВ при малом количестве ошибок второго рода., The final qualifying work presents the method of detecting dangerous undocumented features in Windows drivers based on binary analysis methods. This paper discusses attacks using drivers with undocumented features, based on which a list of dangerous function was identified. The method of detecting un-documented features is proposed using chosen binary analysis methods and the software prototype is implemented. The results of an experimental evaluation of the effectiveness demonstrates a high probability undocumented features detection.

Published
2019
Full Text
View/download PDF

Catalog

Books, media, physical & digital resources
See catalog results