Title :
JMODEX: Model extraction for verifying security properties of web applications
Author :
Mihancea, P.F. ; Minea, Marius
Author_Institution :
LOOSE Res. Group, Politeh. Univ. of Timisoara, Timisoara, Romania
Abstract :
Detecting security vulnerabilities in web applications is an important task before taking them on-line. We present JMODEX, a tool that analyzes the code of web applications to extract behavioral models. The security properties of these models can then be verified with a model checker. An initial evaluation, in which a confirmed security flaw is identified using a model extracted by JMODEX, shows the tool potential.
Keywords :
Internet; formal verification; security of data; JMODEX; Web application; model checker; model extraction; security flaw; security vulnerability; Analytical models; Automata; Buildings; Java; Libraries; Radiation detectors; Security;
Conference_Titel :
Software Maintenance, Reengineering and Reverse Engineering (CSMR-WCRE), 2014 Software Evolution Week - IEEE Conference on
Conference_Location :
Antwerp
DOI :
10.1109/CSMR-WCRE.2014.6747216
