A Practical J2EE Application Static Analysis Method Based Upon Taint Propagation

摘要：

　　Currently security audit/review for binaries is an upcoming method used to detect security vulnerabilities.In this paper we describe an efficient security audit method based on the java binaries.This method can The method in this invention can greatly reduce false positives and provides an efficient solution for automated secure auditing on binaries by only checking the exploitable security flows,especially for the scenarios which source codes are not available.

作者: JianJun Hu Qiaoyan Wen DaiFei Guo

作者单位: State Key Laboratory of Networking and Switching Technology,Beijing University of Posts and Telecommunications,Beijing,100876,China Siemens Ltd.,China

会议类型: 国际会议

会议名称: 2017 International Conference on Electronic Information Technology and Computer Engineering (EITCE 2017)(2017电子信息技术与计算机工程国际会议)(EITCE2017)

会议地点: 珠海

会议语种:英文

页码: 1-4

在线出版日期: 2017-09-23（万方平台首次上网日期，不代表论文的发表时间）