Title
FireBugs: finding and repairing bugs with security patterns
Abstract
Security is often a critical problem in software systems. The consequences of the failure lead to substantial economic loss or extensive environmental damage. Developing secure software is challenging, and retrofitting existing systems to introduce security is even harder. In this paper, we propose an automated approach for <u>Fi</u>nding and <u>Re</u>pairing <u>Bugs</u> based on security patterns (FireBugs), to repair defects causing security vulnerabilities. To locate and fix security bugs, we apply security patterns that are reusable solutions comprising large amounts of software design experience in many different situations. In the evaluation, we investigated 2,800 Android app repositories to apply our approach to 200 subject projects that use javax.crypto APIs. The vision of our automated approach is to reduce software maintenance burdens where the number of outstanding software defects exceeds available resources. Our ultimate vision is to design more security patterns that have a positive impact on software quality by disseminating correlated sets of best security design practices and knowledge.
Year
DOI
Venue
2019
10.1109/MOBILESoft.2019.00014
Proceedings of the 6th International Conference on Mobile Software Engineering and Systems
Keywords
Field
DocType
Security,Software Maintenance,Bug Repair,Cryptography
Software design,Software engineering,Cryptography,Computer science,Software system,Software,Dissemination,Software maintenance,Software quality,Vulnerability
Conference
ISBN
Citations 
PageRank 
978-0-7695-2953-0
0
0.34
References 
Authors
17
4
Name
Order
Citations
PageRank
Larry Singleton100.68
Rui Zhao2183.09
Myoungkyu Song35711.60
Harvey Siy458144.51