A Quantitative Assessment Approach to COTS Component Security

A Quantitative Assessment Approach to COTS Component Security
复制标题

COTS组件安全的定量评估方法

DOI:
10.1155/2013/165029
复制
发表时间:
2013-02
期刊:
Mathematical Problems in Engineering, Article ID:165029
影响因子:
--
通讯作者:
Chengying Mao
Chengying Mao
中科院分区:
其他
文献类型:
--
作者:
Jinfu Chen;Yansheng Lu;Huanhuan Wang;Chengying Mao

文献摘要

参考文献

被引文献

相似文献

软件组件的脆弱性阻碍了组件技术的发展。一种有效的组件安全级别评估方法能够促进组件技术的发展。因此,本文提出一种定量的……(最后一个单词“ass”不完整,无法准确翻译其完整语义)
The vulnerability of software components hinders the development of component technology. An effective assessment approach to component security level can promote the development of component technology. Thus, the current paper proposes a quantitative assessment approach to COTS (commercial-off-the-shelf) component security. The steps of interface fault injection and the assessment framework are given based on the internal factors of the tested component. The quantitative assessment algorithm and formula of component security level are also presented. The experiment results show that the approach not only can detect component security vulnerabilities effectively but also quantitatively assess the component security level. The score of component security can be accurately calculated, which represents the security level of the tested component.
DOI: 10.1109/icacte.2010.5578960
发表时间: 2010-09
期刊: 2010 3rd International Conference on Advanced Computer Theory and Engineering(ICACTE)
影响因子: --
作者:
Yi-kun Zhang;Su-yang Jiang;Ying-an Cui;Bao-wei Zhang;Hui Xia
通讯作者: Yi-kun Zhang;Su-yang Jiang;Ying-an Cui;Bao-wei Zhang;Hui Xia
DOI: 10.1109/aswec.2006.13
发表时间: 2006-04
期刊: Australian Software Engineering Conference (ASWEC'06)
影响因子: --
作者:
K. Khan;Jun Han
通讯作者: K. Khan;Jun Han
DOI: 10.1109/issre.2007.20
发表时间: 2007-11
期刊: The 18th IEEE International Symposium on Software Reliability (ISSRE '07)
影响因子: --
作者:
Xiangrong Wang;Hang Shi;Tze-Yau William Huang;F. C. Lin
通讯作者: Xiangrong Wang;Hang Shi;Tze-Yau William Huang;F. C. Lin
DOI: 10.1109/aswec.2001.948505
发表时间: 2001-08
期刊: Proceedings 2001 Australian Software Engineering Conference
影响因子: --
作者:
K. Khan;Jun Han;Yuliang Zheng
通讯作者: K. Khan;Jun Han;Yuliang Zheng
DOI: 10.1007/s10773-005-7054-y
发表时间: 2002-11
影响因子: 1.4
作者:
S. Gudder;R. Greechie
通讯作者: S. Gudder;R. Greechie