Versenden
Drucken
Schreiber, Andreas und Sonnekalb, Tim und Heinze, Thomas und Kurnatowski, Lynn und Gonzalez-Barahona, Jesus M. und Packer, Heather (2021) Provenance-Based Security Audits and Its Application to COVID-19 Contact Tracing Apps. Lecture Notes in Computer Science, 12839, Seiten 88-105. Springer. doi: 10.1007/978-3-030-80960-7_6. ISSN 0302-9743.
![[img]](https://elib.dlr.de/style/images/fileicons/application_pdf.png) |
PDF
- Nur DLR-intern zugänglich
- Preprintversion (eingereichte Entwurfsversion)
4MB |
Offizielle URL: https://link.springer.com/chapter/10.1007/978-3-030-80960-7_6
Kurzfassung
Software repositories contain information about source code, software development processes, and team interactions. We combine the provenance of development processes with code security analysis results to provide fast feedback on the software’s design and security issues. Results from queries of the provenance graph drives the security analysis, which are conducted on certain events—such as commits or pull requests by external contributors. We evaluate our method on Open Source projects that are developed under time pressure and use Germany’s COVID-19 contact tracing app ‘Corona-Warn-App’ as a case study.
| elib-URL des Eintrags: | https://elib.dlr.de/143225/ | ||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Dokumentart: | Zeitschriftenbeitrag | ||||||||||||||||||||||||||||
| Titel: | Provenance-Based Security Audits and Its Application to COVID-19 Contact Tracing Apps | ||||||||||||||||||||||||||||
| Autoren: |
| ||||||||||||||||||||||||||||
| Datum: | 9 Juli 2021 | ||||||||||||||||||||||||||||
| Erschienen in: | Lecture Notes in Computer Science | ||||||||||||||||||||||||||||
| Referierte Publikation: | Ja | ||||||||||||||||||||||||||||
| Open Access: | Nein | ||||||||||||||||||||||||||||
| Gold Open Access: | Nein | ||||||||||||||||||||||||||||
| In SCOPUS: | Ja | ||||||||||||||||||||||||||||
| In ISI Web of Science: | Nein | ||||||||||||||||||||||||||||
| Band: | 12839 | ||||||||||||||||||||||||||||
| DOI: | 10.1007/978-3-030-80960-7_6 | ||||||||||||||||||||||||||||
| Seitenbereich: | Seiten 88-105 | ||||||||||||||||||||||||||||
| Herausgeber: |
| ||||||||||||||||||||||||||||
| Verlag: | Springer | ||||||||||||||||||||||||||||
| Name der Reihe: | Provenance and Annotation of Data and Processes | ||||||||||||||||||||||||||||
| ISSN: | 0302-9743 | ||||||||||||||||||||||||||||
| Status: | veröffentlicht | ||||||||||||||||||||||||||||
| Stichwörter: | Program analysis, Provenance, Software security, Repository mining, Open source software, COVID-19 | ||||||||||||||||||||||||||||
| HGF - Forschungsbereich: | Luftfahrt, Raumfahrt und Verkehr | ||||||||||||||||||||||||||||
| HGF - Programm: | Raumfahrt | ||||||||||||||||||||||||||||
| HGF - Programmthema: | Technik für Raumfahrtsysteme | ||||||||||||||||||||||||||||
| DLR - Schwerpunkt: | Raumfahrt | ||||||||||||||||||||||||||||
| DLR - Forschungsgebiet: | R SY - Technik für Raumfahrtsysteme | ||||||||||||||||||||||||||||
| DLR - Teilgebiet (Projekt, Vorhaben): | R - Sichere Softwaretechnik, R - Analytik und Visualisierung großer Raumfahrt-Softwaresysteme | ||||||||||||||||||||||||||||
| Standort: | Jena , Köln-Porz , Oberpfaffenhofen | ||||||||||||||||||||||||||||
| Institute & Einrichtungen: | Institut für Softwaretechnologie Institut für Softwaretechnologie > Intelligente und verteilte Systeme Institut für Datenwissenschaften Institut für Datenwissenschaften > Sichere Digitale Systeme | ||||||||||||||||||||||||||||
| Hinterlegt von: | Schreiber, Andreas | ||||||||||||||||||||||||||||
| Hinterlegt am: | 19 Jul 2021 12:24 | ||||||||||||||||||||||||||||
| Letzte Änderung: | 19 Jul 2021 12:24 |
Nur für Mitarbeiter des Archivs: Kontrollseite des Eintrags
