University of Illinois Urbana-Champaign

A Catalog of Security-oriented Program Transformations

Hafiz, Munawar; Adamczyk, Paul; Johnson, Ralph

Content Files
A Catalog of Security-oriented Program Transformations.pdf

Permalink

https://hdl.handle.net/2142/11517

Description

Title
A Catalog of Security-oriented Program Transformations
Author(s)
  • Hafiz, Munawar
  • Adamczyk, Paul
  • Johnson, Ralph
Issue Date
2009-02
Keyword(s)
computer security
Date of Ingest
2009-04-23T15:44:12Z
Abstract
Security requirements change, but the typical way of improving system security by patches is ad hoc and has not produced good results. Security improvements should be systematic, just as new features can be added to software systematically. It would be easier to improve the security of a system if we had a catalog of security-oriented program transformations that could be used to plan changes, to divide the work to make changes, and as a target of automation. This paper describes a catalog of security-oriented program transformations that were derived from security patterns. It describes several ways of categorizing these transformations, our first attempts at validating the catalog, and how the catalog can be used to improve the security of systems.
Type of Resource
text
Genre of Resource
Technical Report
Permalink
http://hdl.handle.net/2142/11517
Copyright and License Information
You are granted permission for the non-commercial reproduction, distribution, display, and performance of this technical report in any format, BUT this permission is only for a period of 45 (forty-five) days from the most recent time that you verified that this technical report is still available from the University of Illinois at Urbana-Champaign Computer Science Department under terms that include this permission. All other rights are reserved by the author(s).

Owning Collections

Research and Tech Reports - Computer Science PRIMARY