首页> 外文会议>2011 IEEE Ninth International Conference on Dependable, Autonomic and Secure Computing >A Connection-Based Signature Approach for Control Flow Error Detection
【24h】

A Connection-Based Signature Approach for Control Flow Error Detection

机译:基于连接的签名方法用于控制流错误检测

获取原文

摘要

Control Flow Errors (CFEs) are major impairments of software system correctness. These CFEs can be caused by operational faults with respect to the execution environment of a software system. Several techniques are proposed to monitor the control flow using signature-based approaches. These techniques partition a software program into branch-free blocks and assign a unique signature for each block. They detect CFEs by comparing the runtime signatures of these blocks with pre-computed signatures based on the program Control Flow Graph (CFG). Unfortunately, branch-free block partitioning does not completely include all the program connections. Consequently, these techniques may fail to detect some invalid transitions due to lack of signatures associated with those missing connections. In this paper, we propose a connection-based signature approach for CFE detection. We first describe our connection-based signature structure in which we partition the program components into Connection Implementation Blocks (CIBs). Each CIB is associated with a Connection-based CFG (CCFG) to represent the control structure of its code segment. We present our control flow monitor structure and CFE checking algorithm using these CCFGs. The error detection approach is evaluated using PostgreSQL open-source database. The results show that this technique is capable of detecting CFEs in different software versions with variable numbers of randomly injected faults.
机译:控制流错误(CFE)是软件系统正确性的主要损害。这些CFE可能是由与软件系统的执行环境有关的操作故障引起的。提出了几种使用基于签名的方法来监视控制流的技术。这些技术将软件程序划分为无分支块,并为每个块分配唯一的签名。他们通过将这些块的运行时签名与基于程序控制流图(CFG)的预先计算的签名进行比较来检测CFE。不幸的是,无分支块分区并不完全包括所有程序连接。因此,由于缺少与那些丢失的连接相关联的签名,这些技术可能无法检测到某些无效的转换。在本文中,我们提出了一种用于CFE检测的基于连接的签名方法。我们首先描述基于连接的签名结构,在该结构中,我们将程序组件划分为连接实现块(CIB)。每个CIB与基于连接的CFG(CCFG)关联,以表示其代码段的控制结构。我们介绍了使用这些CCFG的控制流监视器结构和CFE检查算法。使用PostgreSQL开源数据库对错误检测方法进行了评估。结果表明,该技术能够检测具有可变数量的随机注入故障的不同软件版本中的CFE。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号