Data integrity security spots detected by object reference

Rajasree Punneth Radhakrishnan, Michael Shin, Pushkar Ogale

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

Abstract

The malicious code injected by an insider into a program can compromise sensitive data that is one of the most valuable assets in an organization. This paper describes the Integrity Breach Conditions (IBCs) used to determine security spots that change sensitive data values in a program. A malicious insider can create a security spot to compromise sensitive data using the reference to a class object. We have specified the IBCs by considering object references in the coupling relationships between objects. The IBCs have been implemented in a prototype tool to validate our approach with a case study.

Original languageEnglish
Title of host publicationProceedings - 2021 IEEE 45th Annual Computers, Software, and Applications Conference, COMPSAC 2021
EditorsW. K. Chan, Bill Claycomb, Hiroki Takakura, Ji-Jiang Yang, Yuuichi Teranishi, Dave Towey, Sergio Segura, Hossain Shahriar, Sorel Reisman, Sheikh Iqbal Ahamed
PublisherInstitute of Electrical and Electronics Engineers Inc.
Pages469-474
Number of pages6
ISBN (Electronic)9781665424639
DOIs
StatePublished - Jul 2021
Event45th IEEE Annual Computers, Software, and Applications Conference, COMPSAC 2021 - Virtual, Online, Spain
Duration: Jul 12 2021Jul 16 2021

Publication series

NameProceedings - 2021 IEEE 45th Annual Computers, Software, and Applications Conference, COMPSAC 2021

Conference

Conference45th IEEE Annual Computers, Software, and Applications Conference, COMPSAC 2021
Country/TerritorySpain
CityVirtual, Online
Period07/12/2107/16/21

Keywords

  • Coupling
  • Data integrity
  • Insider attack
  • Integrity breach condition
  • Object reference
  • Security spot

Cite this