Idea: writing secure c programs with secprove

Authors:
Myla M. Archer;Elizabeth I. Leonard;Constance L. Heitmeyer
Affiliations:
Naval Research Laboratory (Code 5546), Washington, DC;Naval Research Laboratory (Code 5546), Washington, DC;Naval Research Laboratory (Code 5546), Washington, DC
Venue:
ESSoS'13 Proceedings of the 5th international conference on Engineering Secure Software and Systems
Year:
2013

Citing 11
Cited 0

Information-flow and data-flow analysis of while-programs

ACM Transactions on Programming Languages and Systems (TOPLAS)
Incremental Parsing

ACM Transactions on Programming Languages and Systems (TOPLAS)
Extended static checking for Java

PLDI '02 Proceedings of the ACM SIGPLAN 2002 Conference on Programming language design and implementation
Using Strongest Postconditions to Improve Software Quality

Software Quality and Productivity: Theory, practice and training
Software Security: Building Security In

Software Security: Building Security In
Formal specification and verification of data separation in a separation kernel for an embedded system

Proceedings of the 13th ACM conference on Computer and communications security
Applying Formal Methods to a Certifiably Secure Software System

IEEE Transactions on Software Engineering
Lazy functional incremental parsing

Proceedings of the 2nd ACM SIGPLAN symposium on Haskell
Improving application security with data flow assertions

Proceedings of the ACM SIGOPS 22nd symposium on Operating systems principles
Boogie: a modular reusable verifier for object-oriented programs

FMCO'05 Proceedings of the 4th international conference on Formal Methods for Components and Objects
Precise and automated contract-based reasoning for verification and certification of information flow properties of programs with arrays

ESOP'10 Proceedings of the 19th European conference on Programming Languages and Systems

Quantified Score

Hi-index	0.00

Visualization

Abstract

This paper describes SecProve, a prototype tool we are developing for checking application-specific security properties of C code, together with our vision of how such a tool can be used by a programmer to maintain security of code during its development.