Searching Open-Source Vulnerability Function Based on Software Modularization

نویسندگان

چکیده

Vulnerable open-source component reuse can lead to security problems. At present, detection for binary programs only reveal whether components with vulnerabilities are reused, which cannot determine the specific location of vulnerabilities. To address this problem, we propose BMVul, an vulnerability function based on software modularization method, is oriented programs. BMVul performs by overlapping clustering method DBM directed graph, then uses feature comparison technology carry out modular analysis. After creating set through signature, detects in modules reusing components. The experimental results show that compared Louvain and B2SFinder, improves precision 3.16% 59.57%, respectively. Moreover, unique module matching improved 39.43% method. F1 score 8.45% B2SFinder. Module-level narrows search space functions, thereby reducing workload detection, great significance

برای دانلود باید عضویت طلایی داشته باشید

برای دانلود متن کامل این مقاله و بیش از 32 میلیون مقاله دیگر ابتدا ثبت نام کنید

اگر عضو سایت هستید لطفا وارد حساب کاربری خود شوید

منابع مشابه

Open Source Software Detection using Function-level Static Software Birthmark

As open-source software (OSS) is widely used, many IT organizations adopt OSS without obeying some guidelines for open-source license agreements. To reduce risks related to open-source licenses, the organizations should meet the requirements for OSS licenses. Because some OSS components may be given from major upstream suppliers in binary form, it is very hard to verify whether a binary program...

متن کامل

A Beamline Matching Application based on Open Source Software

An interactive Beamline Matching application has been developed using beamline and automatic differentiation class libraries. Various freely available components were used; in particular, the user interface is based on FLTK, a C++ toolkit distributed under the terms of the GNU Public License (GPL). The result is an application that compiles without modifications under both X-Windows and Win32 a...

متن کامل

Open Source Software Development*

This article examines and reviews what is known so far about free/open source software development (FOSSD). FOSSD is not the same as software engineering as that is portrayed in common textbooks. Instead, it is a complementary approach to address the many challenges that arise in the development of complex software systems that are often built outside of a traditional corporate software develop...

متن کامل

Open Source Software Engineering

The term Open Source Software (OSS) first appeared in 1998 [1] in an effort to change the popular understanding of what had to that point been called “free software” products like GNU/Linux, Apache, Perl and BIND. In the periods both immediately before and after the coining of the term, many insightful essays appeared both online and in print, attempting to better explain this novel approach to...

متن کامل

ذخیره در منابع من


  با ذخیره ی این منبع در منابع من، دسترسی به آن را برای استفاده های بعدی آسان تر کنید

ژورنال

عنوان ژورنال: Applied sciences

سال: 2023

ISSN: ['2076-3417']

DOI: https://doi.org/10.3390/app13020701