一种嵌入式软件安全漏洞的代码加固方法

doi:10.3969/j.issn.1674-1579.2021.02.003

摘要/Abstract

摘要： 软件定义的概念和技术的发展和应用，装备嵌入式系统的功能主要由软件定义完成，导致装备嵌入式软件规模性和复杂性都在急剧增加，软件安全问题已经成为嵌入式系统乃至装备产品研制和运行维护的核心关注点.借助主流软件代码安全性检测技术，对装备嵌入式软件的漏洞行为和结构分析，建立装备嵌入式软件漏洞特征和系统不安全行为属性规约，通过对软件属性规约的逻辑演算，形成软件安全性加固需求，提出基于安全规约属性模板的漏洞加固代码生成技术，对软件代码中潜在的安全漏洞进行修复和加固，实现装备嵌入式软件强制安全保障.

关键词: 安全漏洞检测, 软件强制安全, 嵌入式软件, 代码加固, 软件定义

Abstract: With the development and application of software definition X, functions of embedded systems are implemented with software definitions, which leads to large increase in scale and complexity of embedded software. Software security has become a key concern of embedded systems and products in operation and maintenance phases. In this paper, the vulnerable behavior and structure are analyzed with existing technology or tool to detect software program vulnerable bug, and some vulnerabilities characteristics and insecurity behavior attributes of software embedded in equipment system are created. Through verifying logic propositions among software attribute specifications, software requirements of security reinforcement are gathered. The vulnerability reinforcement code generation technology based on the security template of attribute specification is proposed to generate reinforcement codes automatically, which can be used for fixing potential security bugs in software code and guarantee the protection of embedded software.

Key words: security bug detection, software security enforcement, embedded software, code reinforcement, software definition

中图分类号:

TP311

董云卫, 张涵博, 李勇军. 一种嵌入式软件安全漏洞的代码加固方法[J]. 空间控制技术与应用, 2021, 47(2): 17-24.

DONG Yunwei, ZHANG Hanbo, LI Yongjun. A Codes Reinforcement Method for Embedded Software Security Vulnerability[J]. Aerospace Contrd and Application, 2021, 47(2): 17-24.

0
/ 收藏文章 0 / 推荐

导出引用管理器 EndNote|Reference Manager|ProCite|BibTeX|RefWorks

链接本文: https://journal01.magtech.org.cn/Jwk3_kjkzjs/CN/10.3969/j.issn.1674-1579.2021.02.003

https://journal01.magtech.org.cn/Jwk3_kjkzjs/CN/Y2021/V47/I2/17

参考文献

Metrics

Viewed

Full text

262

HTML			PDF

Just accepted	Online first	Issue	Just accepted	Online first	Issue
0	0	0	0	0	262

From	Others	local

Times	61	201
Rate	23%	77%

Abstract

188

Just accepted	Online first	Issue

0	0	188

	From	Others

	Times	188
	Rate	100%

Cited

Web of Science	Crossref	ScienceDirect	Search for Citations in Google Scholar >>


This page requires you have already subscribed to WoS.

Shared

[1]	赵性颂, 张承昊, 顾斌. 航天器电推进软件体系结构设计[J]. 空间控制技术与应用, 2023, 49(5): 98-104.
[2]	陈立前, 吴国福, 姜加红. 航天嵌入式软件静态分析技术[J]. 空间控制技术与应用, 2021, 47(2): 86-92.
[3]	陈睿, 于婷婷, 贾春鹏, 李超, 高栋栋, 江云松, 杨孟飞. 航天嵌入式软件数组越界缺陷特征研究[J]. 空间控制技术与应用, 2021, 47(2): 1-9.
[4]	李杨阳, 万波, 梁森, 胡涛. 人工智能技术在嵌入式代码审查中的应用与展望[J]. 空间控制技术与应用, 2020, 46(3): 1-.
[5]	陈睿, 杨孟飞. 基于编码规则的中断数据访问冲突检测方法[J]. 空间控制技术与应用, 2017, 43(3): 59-65.
[6]	蔡雨辰, 奚坤, 黎藜, 王振华. 航天嵌入式软件动力学仿真环境的通用软件架构[J]. 空间控制技术与应用, 2017, 43(3): 66-70.
[7]	魏高乐, 高进, 牛和明, 陈朝晖. 交会对接成像软件的多目标跟踪改进[J]. 空间控制技术与应用, 2017, 43(2): 73-78.
[8]	郝王松, 彭飞, 乔磊, 吴一帆, 刘波, 吴军. 基于Eclipse的航天嵌入式软件集成开发环境设计与实现[J]. 空间控制技术与应用, 2015, 41(4): 44-48.
[9]	傅秀涛, 綦艳霞, 陈朝晖. 航天嵌入式软件浮点运算误差分析与控制[J]. 空间控制技术与应用, 2015, 41(4): 54-57.
[10]	黄晨, 段永颢. 基于UML模型的嵌入式软件测试用例生成方法*[J]. 空间控制技术与应用, 2013, 39(1): 57-62.
[11]	董晓刚, 杨孟飞. 航天嵌入式软件缺陷的分类方法[J]. 空间控制技术与应用, 2012, 38(5): 49-52.