2011 Fiscal Year Final Research Report
Verification of Web Software Based on String Analysis
| Project/Area Number |
21500028
|
|---|
| Research Category |
Grant-in-Aid for Scientific Research (C)
|
| Allocation Type | Single-year Grants |
|---|
| Section | 一般 |
|---|
| Research Field |
Software
|
|---|
| Research Institution | University of Tsukuba |
|---|
Principal Investigator |
|
|---|
| Project Period (FY) |
2009 – 2011
|
| Keywords | プログラム処理系 / ソフトウェア検証 / ウェブ |
|---|
| Research Abstract |
We have improved a program analysis called string analysis that can be applied to the detection of Web software vulnerabilities in the following respects. The readability of counter examples generated by the analysis is improved by constructing them as context-free grammars in a specific form. We have formulated the semantics of regular expression matching in programming languages, and enabled their precise analysis through the precise translation to transducers. For the analysis of a server-side program utilizing a database, we have improved its analysis by analyzing the constraint on data imposed by the program storing the data.
|
