WU Rong-hui, WANG Ning, SUN Jian-hua, et al. A Full Automatic Detection Method for Security Policy of JVM Run-Time Library[J]. Acta Electronica Sinica, 2013, 41(1): 161-165.
DOI:
WU Rong-hui, WANG Ning, SUN Jian-hua, et al. A Full Automatic Detection Method for Security Policy of JVM Run-Time Library[J]. Acta Electronica Sinica, 2013, 41(1): 161-165. DOI: 10.3969/j.issn.0372-2112.2013.01.028.
A Full Automatic Detection Method for Security Policy of JVM Run-Time Library
JVM run-time library can implement various security policies by calling the library functions of its own
one of the extremely important security policy requires that sensitive operations must be performed after access control permissions checks.Traditionally it relies manual analysis to ensure that the JVM run-time library satisfy this security policy.Java standard library
covering thousands of classes
tens of thousands of methods
is in rapid development and high-rate evolution.It is time-consuming and error-prone to analyze the security policy artificially.This paper presents a full automatic
efficient and rapid model detection method for evaluating that whether the JVM in compliance with this security policy.Scanning the byte code files of Java standard class library
generating control flow graph of the member methods
our method can work out method summary by taint analysis after defining detecting model and automatically detect the risky methods.