• Home
  • Search
  • Interactive synthesis of code-level security rules
  • Cite Icon2
  • https://doi.org/10.17760/d20467254Copy DOI Icon

Interactive synthesis of code-level security rules

  • Jan 1, 2017
  • Leo St Amour
Show More
  • Abstract
  • Literature Map
  • References
  • Citations
  • Similar Papers
Abstract

Software engineers inadvertently introduce bugs into software during the development process and these bugs can potentially be exploited once the software is deployed. As the size and complexity of software systems increase, it is important that we are able to verify and validate not only that the software behaves as it is expected to, but also that it does not violate any security policies or properties. One of the approaches to reduce software vulnerabilities is to use a bug detection tool during the development process. Many bug detection techniques are limited by the burdensome and error prone process of manually writing a bug specification. Other techniques are able to learn specifications from examples, but are limited in the types of bugs that they are able to discover. This work presents a novel, general approach for synthesizing security rules for C code. The approach combines human knowledge with an interactive logic programming synthesis system to learn Datalog rules for various security properties. The approach has been successfully used to synthesize rules for three intraprocedural security properties: (1) out of bounds array accesses, (2) return value validation, and (3) double freed pointers. These rules have been evaluated on randomly generated C code and yield a 0% false positive rate and a 0%, 20%, and 0% false negative rate, respectively for each rule.--Author's abstract

Similar Papers
  • Conference Article

The consequences of statistical tests on proxy variables, an application to short-TE as an estimation for MEGA-edited GABA

  • Sep 16, 2025
  • Proceedings on CD-ROM - International Society for Magnetic Resonance in Medicine. Scientific Meeting and Exhibition/Proceedings of the International Society for Magnetic Resonance in Medicine, Scientific Meeting and Exhibition
  • Karl Landheer +2
  • Research Article
  • Citations66

Reliability of non-lethal surveillance methods for detecting ranavirus infection

  • Jan 01, 2012
  • Diseases of Aquatic Organisms
  • Mj Gray +2
  • Research Article
  • Citations41

The Effect of Testing Reliability on Visual Field Sensitivity in Normal Eyes: The Singapore Chinese Eye Study

  • Aug 30, 2017
  • Ophthalmology
  • Nicholas Y.Q Tan +7
  • Conference Article
  • Citations6

Bug Detection Using Particle Swarm Optimization with Search Space Reduction

  • Feb 01, 2015
  • Arun Reungsinkonkarn +1
  • Research Article
  • Citations13

Error rates in reporting prostatic core biopsies

  • Mar 25, 2011
  • Histopathology
  • Jon D Oxley +1
  • Research Article
  • Citations22

An Evaluation of Conventional Culture, invA PCR, and the Real-Time PCR iQ-Check Kit as Detection Tools for Salmonella in Naturally Contaminated Premarket and Retail Turkey

  • Feb 01, 2008
  • Journal of Food Protection
  • Chantal W Nde +3
  • Research Article
  • Citations103

Fatigue effects in automated perimetry

  • Mar 15, 1988
  • Applied Optics
  • Chris A Johnson +2
  • Conference Article

A Proposed Figure of Merit for Evaluating the Performance of Radiation Waste Measurement Systems

  • Jan 01, 2011
  • Ronald M Keyser +3
  • PDF
  • Research Article
  • Citations7

Real-World Analysis of the Aging Effects on Visual Field Reliability Indices in Humans

  • Dec 09, 2021
  • Journal of Clinical Medicine
  • Tomoki Shirakami +4
  • Abstract

How do we make the best choice in assays used to monitor HLA antibodies in renal recipients awaiting transplant? A comparison of flowpra beads with luminex single-antigen beads

  • Aug 29, 2015
  • Human Immunology
  • Eileen S Maccann +1
  • Research Article

MP32-18 EVALUATING THE DIAGNOSTIC ACCURACY OF BIPARAMETRIC MAGNETIC RESONANCE IMAGING IN MUSCLE-INVASIVE BLADDER CANCER

  • Apr 01, 2023
  • Journal of Urology
  • Qiang Lv +3
  • Research Article

Comparison of IMO vifa24plus(1-2) and Humphrey Field Analyzer 24-2.

  • Jan 01, 2025
  • Clinical ophthalmology (Auckland, N.Z.)
  • Yuki Takagi +6
  • Research Article
  • Citations31

Tracking pointers with path and context sensitivity for bug detection in C programs

  • Sep 01, 2003
  • ACM SIGSOFT Software Engineering Notes
  • V Benjamin Livshits +1
  • Research Article
  • Citations127

Systematic learning of gene functional classes from DNA array expression data by using multilayer perceptrons.

  • Nov 01, 2002
  • Genome Research
  • Alvaro Mateos +5
  • Book Chapter

Identifying Repeated Interleavings to Improve the Efficiency of Concurrency Bug Detection

  • Jan 01, 2015
  • Zhendong Wu +2
Cactus Communications logo

Copyright 2026 Cactus Communications. All rights reserved.