2026-03-11T00:48:41Z https://ipsj.ixsq.nii.ac.jp/oai

oai:ipsj.ixsq.nii.ac.jp:00074832 2025-01-21T21:25:06Z 6164:6165:6462:6463

Challenges and design considerations for the authorizationanalysis of a software framework Challenges and design considerations for the authorizationanalysis of a software framework Wook, Shin Shinsaku, Kiyomoto Kazuhide, Fukushima Toshiaki, Tanaka Wook, Shin Shinsaku, Kiyomoto Kazuhide, Fukushima Toshiaki, Tanaka セキュリティ評価・監査 We suggest an automated analysis tool design, where we can analyze the permission-basedsecurity of a software framework and test if an application execution can be completed withgiven permissions. For the analysis, we take two approaches. The one is theorem proving-basedapproach that formally specifies permission manipulation operations of the framework, definessecurity of the system, and then tests the logical correctness of the operations. The other is asimple simulation that partially executes a given application codes with given authorization. We suggest an automated analysis tool design, where we can analyze the permission-basedsecurity of a software framework and test if an application execution can be completed withgiven permissions. For the analysis, we take two approaches. The one is theorem proving-basedapproach that formally specifies permission manipulation operations of the framework, definessecurity of the system, and then tests the logical correctness of the operations. The other is asimple simulation that partially executes a given application codes with given authorization. 情報処理学会 2011-10-12 eng conference paper https://ipsj.ixsq.nii.ac.jp/records/74832 コンピュータセキュリティシンポジウム2009　(CSS2009) 論文集 2009 1 6 https://ipsj.ixsq.nii.ac.jp/record/74832/files/IPSJ-CSS2009C43.pdf application/pdf 235.3 kB 2011-10-19