@inproceedings{c68b5fbecd494ee0ae8df6532250b168,
title = "Maintaining Authorization Hook Placements Across Program Versions",
abstract = "We examine the problem of maintaining security code across program versions. There are now several cases where programmers manually retrofit their programs with security code, such as authorization mechanisms. However, programs evolve, so a challenge for programmers is to determine whether their security code remains correct across multiple versions of the program. The insight of this work is that programmers can use the constraints on the authorization policies that can be enforced in one version of the program to limit their effort in validating authorization hook placements in later versions. We develop a tool we call HEIMDAL to implement this insight, finding that a modest number of authorization constraints require review across several versions of the X window server program.",
author = "Nirupama Talele and Divya Muthukumaran and Frank Capobianco and Trent Jaeger and Gang Tan",
year = "2017",
month = feb,
day = "1",
doi = "10.1109/SecDev.2016.024",
language = "English (US)",
series = "Proceedings - 2016 IEEE Cybersecurity Development, SecDev 2016",
publisher = "Institute of Electrical and Electronics Engineers Inc.",
pages = "67--68",
booktitle = "Proceedings - 2016 IEEE Cybersecurity Development, SecDev 2016",
address = "United States",
note = "2016 IEEE Cybersecurity Development, SecDev 2016 ; Conference date: 03-11-2016 Through 04-11-2016",
}