NDLI: Vulcloud: Scalable and Hybrid Vulnerability Detection in Cloud Computing

Content Provider	IEEE Xplore Digital Library
Author	Jingzheng Wu Yanjun Wu Zhifei Wu Mutian Yang Yongji Wang
Copyright Year	2013
Description	Author affiliation: State Key Lab. of Comput. Sci., Nat. Eng. Res. Center of Fundamental Software, China (Yongji Wang) \|\| Inst. of Software, Beijing, China (Jingzheng Wu; Yanjun Wu; Zhifei Wu; Mutian Yang)
Abstract	Vulnerability exploits will result in security breaches or violations of the system's security policy causing information leakage or economic losses. Although many detection methods such as static analysis, dynamic analysis and fuzz testing have been presented, the vulnerabilities are still difficult to detect. In this paper, we propose a new detection cloud service Vulcloud, which is scalable and hybrid combining the static, dynamic and fuzzing into cloud computing. Vulcloud first statically analyzes the objects and reports the potential vulnerable items. And then, the fuzzing cases for the items are semi-automated created, and tested under the dynamic monitoring. Finally, the source code of the results are statically analyzed again to determine whether they are vulnerabilities or not. The prototype of Vulcloud is implemented, and the performance is evaluated by Mplayer source code. The experiment results show that Vulcloud can detect vulnerabilities in software, and the challenges of storage and processing capabilities are resolved by cloud computing.
Starting Page	225
Ending Page	226
File Size	297162
Page Count	2
File Format	PDF
e-ISBN	9781479929252
DOI	10.1109/SERE-C.2013.17
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2013-06-18
Publisher Place	USA
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Cloud computing Cloud Computing Heuristic algorithms Vulnerability Detection Computer crashes Dynamic Analysis Security Fuzz testing Static Analysis Monitoring Testing
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Vulnerability Detection of Android System in Fuzzing Cloud

Scalable transactions in Cloud Data Stores

An Heuristic Method for Web-Service Program Security Testing

Data Velocity Scaling via Dynamic Monitoring Frequency on Ultrascale Infrastructures

Dynamic taint analysis for vulnerability exploits detection

Test as a Service: A Framework for Web Security TaaS Service in Cloud Environment

Research on software security vulnerability detection technology

AndroShield: Automated Android Applications Vulnerability Detection, a Hybrid Static and Dynamic Analysis Approach

Configuration Fuzzing for Software Vulnerability Detection

Vulcloud: Scalable and Hybrid Vulnerability Detection in Cloud Computing

Similar Documents

Vulnerability Detection of Android System in Fuzzing Cloud

Scalable transactions in Cloud Data Stores

An Heuristic Method for Web-Service Program Security Testing

Data Velocity Scaling via Dynamic Monitoring Frequency on Ultrascale Infrastructures

Dynamic taint analysis for vulnerability exploits detection

Test as a Service: A Framework for Web Security TaaS Service in Cloud Environment

Research on software security vulnerability detection technology

AndroShield: Automated Android Applications Vulnerability Detection, a Hybrid Static and Dynamic Analysis Approach

Configuration Fuzzing for Software Vulnerability Detection

Vulcloud: Scalable and Hybrid Vulnerability Detection in Cloud Computing