FireBugs: Finding and repairing bugs with security patterns

Larry Singleton, Rui Zhao, Myoungkyu Song, Harvey Siy

Research output: Chapter in Book/Report/Conference proceedingConference contribution

1 Scopus citations

Abstract

Security is often a critical problem in software systems. The consequences of the failure lead to substantial economic loss or extensive environmental damage. Developing secure software is challenging, and retrofitting existing systems to introduce security is even harder. In this paper, we propose an automated approach for Finding and Repairing Bugs based on security patterns (FireBugs), to repair defects causing security vulnerabilities. To locate and fix security bugs, we apply security patterns that are reusable solutions comprising large amounts of software design experience in many different situations. In the evaluation, we investigated 2,800 Android app repositories to apply our approach to 200 subject projects that use javax.crypto APIs. The vision of our automated approach is to reduce software maintenance burdens where the number of outstanding software defects exceeds available resources. Our ultimate vision is to design more security patterns that have a positive impact on software quality by disseminating correlated sets of best security design practices and knowledge.

Original languageEnglish (US)
Title of host publicationProceedings - 2019 IEEE/ACM 6th International Conference on Mobile Software Engineering and Systems, MOBILESoft 2019
PublisherInstitute of Electrical and Electronics Engineers Inc.
Pages30-34
Number of pages5
ISBN (Electronic)9781728133959
DOIs
StatePublished - May 2019
Event6th IEEE/ACM International Conference on Mobile Software Engineering and Systems, MOBILESoft 2019 - Montreal, Canada
Duration: May 25 2019 → …

Publication series

NameProceedings - 2019 IEEE/ACM 6th International Conference on Mobile Software Engineering and Systems, MOBILESoft 2019

Conference

Conference6th IEEE/ACM International Conference on Mobile Software Engineering and Systems, MOBILESoft 2019
CountryCanada
CityMontreal
Period5/25/19 → …

Keywords

  • Bug Repair
  • Cryptography
  • Security
  • Software Maintenance

ASJC Scopus subject areas

  • Computer Networks and Communications
  • Hardware and Architecture
  • Software

Fingerprint Dive into the research topics of 'FireBugs: Finding and repairing bugs with security patterns'. Together they form a unique fingerprint.

  • Cite this

    Singleton, L., Zhao, R., Song, M., & Siy, H. (2019). FireBugs: Finding and repairing bugs with security patterns. In Proceedings - 2019 IEEE/ACM 6th International Conference on Mobile Software Engineering and Systems, MOBILESoft 2019 (pp. 30-34). [8817034] (Proceedings - 2019 IEEE/ACM 6th International Conference on Mobile Software Engineering and Systems, MOBILESoft 2019). Institute of Electrical and Electronics Engineers Inc.. https://doi.org/10.1109/MOBILESoft.2019.00014