An Approach for Identifying Software Vulnerabilities Based on Error Propagation Analysis
Li Xin Ai · Chinese Journal of Computers · 2007
For the software system operating in space environment where radiation phenomenon exists widely,identifying the vulnerabilities emphasizes particularly on the analysis about the effect of environment on the software.This paper presents a methodology for analyzing the vulnerabilities in software subjected to environment perturbation.Based on the premise that the software has been modularized,this methodology analyzes the error-generation and error-propagation process in software from signal and module level each,as a result of giving a theory framework for identifying software vulnerabilities.Whereafter,a fault-injection-based method for estimation of the various measures in the framework is described and the software of a real embedded control system used in a satellite is analyzed to show the type of results obtained by the methodology.