Intra-component security certification

• Authors: Anurag Dixit
• Venue: Proceedings of the International Conference on Advances in Computing, Communication and Control
• Year: 2009

Large, distributed application plays an increasing central role in today's Information Technology environment. The diversity and openness of these systems have given raise to questions of trust, certification and security. This paper deals with the up gradation of security certificate of a component. As security certification is necessary for third-party components, taking certification from the beginning whenever a component is updated turns out to be a redundant process. It leads to wastage of time especially in large component based software systems. To remove that redundant certification we propose a CERTDRIVER. The proposed CERTDRIVER takes the component, its required security properties as security goals and version number specified by user as input and gives output a certified component providing its security in terms of percentages. The whole process centers on version number. In the whole process, it will also take the help of test cases which can be useful while finding out errors in the component. The aim of this paper to examine certification, trust and security related questions and try to find out possible solutions.