NDLI: Vulnerability analysis in VGBPS using Prolog

Please wait, while we are loading the content...

Finite abstract models for deterministic transition systems: fair parallel composition and refinement-preserving logic

Slicing abstractions

Nuovo DRM paradiso: towards a verified fair DRM scheme

Formalizing compatibility and substitutability in communication protocols using I/O-constraint automata

Is your security protocol on time?

Adapting the UPPAAL model of a distributed lift system

Zone-based universality analysis for single-clock timed automata

Compositional semantics of system-level designs written in systemC

Reusing requirements: the need for extended variability models

Test selection criteria for quantifier-free first-order specifications

Formal testing of systems presenting soft and hard deadlines

Automatic composition of stateless components: a logical reasoning approach

A model of component-based programming

Contract based multi-party service composition

Regulating data exchange in service oriented applications

A behavioural congruence for web services

Logic-based detection of conflicts in APPEL policies

Hoare logic for ARM machine code

Action abstraction in timed process algebra: the case for an untimed silent step

Type abstractions of name-passing processes

Formal specification of multi-agent systems by using EUSMs

Strong safe realizability of message sequence chart specifications

Implication-based approximating bounded model checking

Logical bisimulations and functional languages

Efficient state space reduction for automata by fair simulation

Model checking temporal metric specifications with Trio2Promela

Design and implementation of a dynamic-reconfigurable architecture for protocol stack

Vulnerability analysis in VGBPS using Prolog

An alternative algorithm for constraint automata product

A review on specifying software architectures using extended automata-based models

ArchC#: a new architecture description language for distributed systems

Relationships meet their roles in object oriented programming

Vulnerability analysis in VGBPS using Prolog

Content Provider	ACM Digital Library
Author	Jalili, Rasool Taherian, Mohsen Rafiei, Mohammad Ebrahim Movaghar, Ali Mousavi, Hamid
Abstract	Vulnerabilities are now part of all software systems. To handle vulnerabilities, many approaches have been proposed till now. Many of these approaches try to analyze vulnerabilities based on model checking techniques. However, the models used in these approaches handle authorized and unauthorized rules separately. This basically cause in weaker modeling abilities and consequently weaker vulnerability analysis. From authorized and unauthorized rules, we mean those emanated from access control model and those originated from vulnerabilities respectively. Currently, a new general graph-based protection system concentrating on vulnerabilities called VGBPS is proposed to overcome the mentioned problem. VGBPS combines vulnerabilities and their related rules in an access control system, in a way that no extra effort is needed to handle them. In contrast, vulnerability analysis in this model can be done by answering safety problem. Using this model, we propose a new approach for vulnerability analysis based on Prolog inference engine. In this approach, we show how to express modeling graph and rules set of a VGBPS model using Prolog facts and rules. Safety problem is also defined by Prolog rules. Finally, we use Prolog inference engine to answer safety problem which is the base of vulnerability analysis in VGBPS. We provide a case study to show how this approach can help us find possible exploits of a specific configuration in a system. Using Prolog, we can also find all possible scenarios of these exploits which can be used in many security analyses.
Starting Page	404
Ending Page	411
Page Count	8
ISBN	9783540756972
ISSN	03029743
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2007-04-17
Publisher Place	Berlin, Heidelberg
Access Restriction	Subscribed
Subject Keyword	Safety problem Protection system Vulnerability analysis Prolog
Content Type	Text
Resource Type	Article
Subject	Theoretical Computer Science Computer Science

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

© Springer-Verlag Berlin Heidelberg 2007 Vulnerability Analysis in VGBPS Using Prolog

Keynote 3: Topological Analysis of Network Attack Vulnerability

Dataflow Analysis for Known Vulnerability Prevention System

An Optimization Approach using Soft Constraints for the Cascade Vulnerability Problem

Using Description Logics for Network Vulnerability Analysis

The cascade vulnerability problem

Using Vulnerability Analysis to Model Attack Scenario for Collaborative Intrusion Detection

Applying model intelligence frameworks for deployment problem in real-time and embedded systems

Determination of System Weaknesses Based on the Analysis of Vulnerability Indexes and the Source Code of Exploits

Vulnerability analysis in VGBPS using Prolog

Similar Documents

© Springer-Verlag Berlin Heidelberg 2007 Vulnerability Analysis in VGBPS Using Prolog

Keynote 3: Topological Analysis of Network Attack Vulnerability

Dataflow Analysis for Known Vulnerability Prevention System

An Optimization Approach using Soft Constraints for the Cascade Vulnerability Problem

Using Description Logics for Network Vulnerability Analysis

The cascade vulnerability problem

Using Vulnerability Analysis to Model Attack Scenario for Collaborative Intrusion Detection

Applying model intelligence frameworks for deployment problem in real-time and embedded systems

Determination of System Weaknesses Based on the Analysis of Vulnerability Indexes and the Source Code of Exploits

Vulnerability analysis in VGBPS using Prolog