Constructing a Knowledge Base for Software Security Detection Based on Similar Call Graph

Author

Xue, Jingfeng ; Hu, Changzhen ; Wang, Kunsheng ; Ma, Rui ; Leng, Bingxin

Author_Institution

Sch. of Software, Beijing Inst. of Technol., Beijing, China

Volume

1

fYear

2009

fDate

28-30 Dec. 2009

Firstpage

593

Lastpage

597

Abstract

Software structure is very important for software security. But it is very difficult to obtain software structure by software execution trace. In this paper, by researching system call sequences in the process of software execution, similar call graph is proposed. We present how to generate similar call graph by observed system call sequences. Based on this, a knowledge base for software security detection is constructed. Experiments show false alarm rate can be decreased effectively by the knowledge base and detection rate is higher by using appropriate threshold.

Keywords

security of data; knowledge base construction; similar call graph; software execution trace; software security detection; software structure; Aerospace engineering; Association rules; Computer security; Data security; Information security; Kernel; Software libraries; Software systems; Association Rules; Knowledge Base; Similar Call Graph; Software Security;

fLanguage

English

Publisher

ieee

Conference_Titel

Computer and Electrical Engineering, 2009. ICCEE '09. Second International Conference on

Conference_Location

Dubai

Print_ISBN

978-1-4244-5365-8

Electronic_ISBN

978-0-7695-3925-6

Type

conf

DOI

10.1109/ICCEE.2009.66

Filename

5380177