 |
As software spreads to various industries, software dependence and complexity increase, and the probability of software defects is also increasing. Among the possible defects, we deal with integer overflow. First, I will introduce software disasters for integer overflow caused by reliability and security issues. Second, I explain the existing research on the relationship between reliability and security and show the definition of reliability and security that we use. Third, I will say the definition of that true and false positive in the static analysis based on the definition of reliability and security. Also, I will introduce the four cases of potential integer overflow using the binary search case and show the results of static analysis. And I will explain the result of static analysis for the CWE-190 test case among Juliet Test Suite provided by the National Institute of Standards and Technology. Finally, I will give you our conclusion. |
IEEE/ICACT20210212 Slide.02
[Big Slide]