Cross-language weaving approach targeting software security hardening

In this paper, we propose an approach for systematic security hardening of software based on aspect-oriented programming and Gimple language. We also present the first steps towards a formal specification for Gimple weaving together with the implementation methodology of the proposed weaving semanti...

Full description

Saved in:
Bibliographic Details
Main Author: Mourad, Azzam (author)
Other Authors: Alhadidi, Dima (author), Debbabi, Mourad (author)
Format: conferenceObject
Published: 2017
Online Access:http://hdl.handle.net/10725/5333
http://dx.doi.org/10.1109/PST.2008.22
http://libraries.lau.edu.lb/research/laur/terms-of-use/articles.php
http://ieeexplore.ieee.org/abstract/document/4641276/
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:In this paper, we propose an approach for systematic security hardening of software based on aspect-oriented programming and Gimple language. We also present the first steps towards a formal specification for Gimple weaving together with the implementation methodology of the proposed weaving semantics. The primary contribution of this approach is providing the software architects with the capabilities to perform systematic security hardening by applying well-defined solutions and without the need to have expertise in the security solution domain. We explore the viability of our propositions by realizing the weaving semantics for Gimple by implementing it into the GCC compiler and applying our methodologies for systematic security hardening to develop a case study for securing the connections of client applications together with experimental results.