Heuristic and Knowledge-Based Security Checks of Source Code Artifacts Using Community Knowledge
Logos
ISBN 978-3-8325-5349-4
Standardpreis
Bibliografische Daten
Fachbuch
Buch. Softcover
2021
In englischer Sprache
Umfang: 217 S.
Format (B x L): 14,5 x 21 cm
Verlag: Logos
ISBN: 978-3-8325-5349-4
Produktbeschreibung
Comprehensive knowledge is required to carry out security checks on software artifacts, such as data covering known vulnerabilities and their manifestation in the source code as well as possible attack strategies. Approaches that check software libraries and source code fragments are provided for the automated use of the data.
Insecure software libraries can be detected using the NVD combined with metadata and library file hash approaches introduced in this dissertation. Vulnerable source code fragments can be identified using community knowledge represented by code fragments extracted from the largest coding community websites: Stack Overflow and GitHub. A state-of-the-art clone detection approach is modified and enriched by several heuristics to enable vulnerability detection and leverage community knowledge while maintaining good performance. Using various case studies, the approaches implemented in Eclipse plugins and a JIRA plugin are adapted to the users´ needs and evaluated.
Autorinnen und Autoren
Produktsicherheit
Hersteller
Logos Verlag Berlin GmbH
Georg-Knorr-Str. 4, Geb. 10
12681 Berlin, DE
redaktion@logos-verlag.de