AI-based Static Application Security Testing Guide: Improved Threat Modeling for Detection, Classification & Prevention of Leading to Vulnerability Code Smells - Brossura

Shah Jahan, Malik

Brossura

ISBN 10: 6207997042 ISBN 13: 9786207997046

Casa editrice: LAP LAMBERT Academic Publishing, 2024

Riassunto

Code smells are usually ignored as they are neither a bug, nor a vulnerability. Quality engineers and, specially, security architects ignore them. As some of the code smells may lead towards vulnerability which may further be exploited by the hackers, therefore, such vulnerable code smells must be considered and further mitigated by threat modelers. In order to provide a repository of such code smells to security designers, a process had been devised and experimented. During the execution, various web applications had been passed through SAST and resulting code smells had been extracted and then inserted into a new dataset via Python. Later on, the code smells deposited in the dataset had been classified into various categories. Finally, machine learning algorithms had been assessed through WEKA and the fastest as well the most accurate algorithm had been selected. Current security standards do not ensure mitigation of threats caused by leading-to-vulnerability code smells, till to date. Typically, threat modelers assess security of a system through modeling threats via CIA, STRIDE and LINDDUN standards on its DFD and various architectural / infrastructural diagrams.

Dettagli dell'edizione

• Editore: LAP LAMBERT Academic Publishing
• Data di pubblicazione: 2024
• Lingua: Inglese
• ISBN 10: 6207997042
• ISBN 13: 9786207997046
• Rilegatura: Copertina flessibile
• Numero di pagine: 100
• Contatto del produttore: non disponibile
• Persona responsabile: KreGa Onlinehandel GmbH; 4950000000000; info@krega-onlinehandel.de; ; Birkenweg 31; Brakel; 33034; Germania