Information disclosure vulnerabilities allow attackers to access sensitive information in applications, posing significant threats in many sectors. These vulnerabilities often originate in the modeling and programming stages. This paper addresses the detection of vulnerabilities in component-based models at the modeling stage. We propose a method based on the Alloy model checker for specifying software models and verifying their correctness. Our approach involves specifying reusable models of communication patterns. We show that the method is able to detect vulnerabilities and provide information for their mitigation.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Detecting Information Disclosure Vulnerability in Software Architectures Using Alloy

  • Quentin Rouland,
  • Kamel Adi,
  • Omer Nguena Timo,
  • Luigi Logrippo

摘要

Information disclosure vulnerabilities allow attackers to access sensitive information in applications, posing significant threats in many sectors. These vulnerabilities often originate in the modeling and programming stages. This paper addresses the detection of vulnerabilities in component-based models at the modeling stage. We propose a method based on the Alloy model checker for specifying software models and verifying their correctness. Our approach involves specifying reusable models of communication patterns. We show that the method is able to detect vulnerabilities and provide information for their mitigation.