Analyzing xfig using the Bauhaus tool

Czeranski, J.; Eisenbarth, Thomas; Kienle, Holger M.; Koschke, Rainer; Simon, Daniel

doi:10.1109/wcre.2000.891467

Cited by 5 publications

(3 citation statements)

References 1 publication

Supporting

Mentioning

Contrasting

Order By: Relevance

“…For visualizing the different views of RFGs, the Graphical Visualiser (Gravis) has been implemented [7]. Gravis facilitates high-level analysis of the system and provides a rich functionality to produce new views by RFG analyses or to manipulate generated views.…”

Section: Architecture-based Analysis With the Bauhaus Toolmentioning

confidence: 99%

The Transitivity-of-Trust Problem in Android Application Interaction

Bartsch¹,

Sohr²,

Bunke³

et al. 2013

2013 International Conference on Availability, Reliability and Security

View full text Add to dashboard Cite

Abstract-Mobile phones have developed into complex platforms with large numbers of installed applications and a wide range of sensitive data. Application security policies limit the permissions of each installed application. As applications may interact, restricting single applications may create a false sense of security for end users, while data may still leave the mobile phone through other applications. Instead, the information flow needs to be policed for the composite system of applications in a transparent manner. In this paper, we propose to employ static analysis, based on the software architecture and focused on dataflow analysis, to detect information flows between components. Specifically, we aim to reveal transitivity-of-trust problems in multi-component mobile platforms. We demonstrate the feasibility of our approach with two Android applications.

show abstract

Section: Architecture-based Analysis With the Bauhaus Toolmentioning

confidence: 99%

The Transitivity-of-Trust Problem in Android Application Interaction

Bartsch¹,

Sohr²,

Bunke³

et al. 2013

2013 International Conference on Availability, Reliability and Security

View full text Add to dashboard Cite

show abstract

“…The model of the RFG is fully dynamic and may be modified by the user, i.e., by inserting or deleting node/edge attributes and types. For visualizing the different views of RFGs, Graphical Visualiser (Gravis) has been implemented [8]. The Gravis tool facilitates high-level analysis of the system and provides rich functionality to produce new views by RFG analyses or to manipulate generated views.…”

Section: The Bauhaus Tool Suitementioning

confidence: 99%

Idea: Towards Architecture-Centric Security Analysis of Software

Sohr

Berger

2010

Lecture Notes in Computer Science

View full text Add to dashboard Cite

Abstract. Static security analysis of software has made great progress over the last years. In particular, this applies to the detection of lowlevel security bugs such as buffer overflows, Cross-Site Scripting and SQL injection vulnerabilities. Complementarily to commercial static code review tools, we present an approach to the static security analysis which is based upon the software architecture using a reverse engineering tool suite called Bauhaus. This allows one to analyze software on a more abstract level, and a more focused analysis is possible, concentrating on software modules regarded as security-critical. In addition, certain security flaws can be detected at the architectural level such as the circumvention of APIs or incomplete enforcement of access control. We discuss our approach in the context of a business application and Android's Java-based middleware.

show abstract

“…Many tools strive to address the organization problem by analyzing and categorizing the data into meta-information (e.g., Bauhaus [5], Taxform [7], GUPRO [14], Autocode [25], and Rigi [26]). Tools such as [18] also provide visualization of different perspectives of the program and its execution.…”

Section: Introductionmentioning

confidence: 99%