发明申请
- 专利标题: Systematic Approach to Uncover Visual Ambiguity Vulnerabilities
- 专利标题(中): 揭示视觉模糊性脆弱性的系统方法
-
申请号: US11768134申请日: 2007-06-25
-
公开(公告)号: US20080133976A1公开(公告)日: 2008-06-05
- 发明人: Shuo Chen , Yi-Min Wang , Ralf Sasse , Jiahe Helen Wang
- 申请人: Shuo Chen , Yi-Min Wang , Ralf Sasse , Jiahe Helen Wang
- 申请人地址: US WA Redmond
- 专利权人: Microsoft Corporation
- 当前专利权人: Microsoft Corporation
- 当前专利权人地址: US WA Redmond
- 主分类号: G06F11/36
- IPC分类号: G06F11/36
摘要:
To achieve end-to-end security, traditional machine-to-machine security measures are insufficient if the integrity of the graphical user interface (GUI) is compromised. GUI logic flaws are a category of software vulnerabilities that result from logic flaws in GUI implementation. The invention described here is a technology for uncovering these flaws using a systematic reasoning approach. Major steps in the technology include: (1) mapping a visual invariant to a program invariant; (2) formally modeling the program logic, the user actions and the execution context, and systematically exploring the possibilities of violations of the program invariant; (3) finding real spoofing attacks based on the exploration.