@inproceedings{768ea65b9e7b4150abc973078aa812e8,
title = "Security assessment for application network services using fault injection",
abstract = "Vulnerabilities in network protocol software have been problematic since Internet infrastructure was deployed. These vulnerabilities damage the reliability of network software and create security holes in computing environment. Many critical security vulnerabilities exist in application network services of which specification or description has not been published. In this paper, we propose a security assessment methodology based on fault injection techniques to improve reliability of the application network services with no specifications published. We also implement a tool for security testing based on the proposed methodology. Windows RPC network services are chosen as an application network service considering its unknown protocol specification and are validated by the methodology. It turns out that the tool detects unknown vulnerabilities in Windows network module.",
keywords = "Buffer overflow, Fault injection, RPC (remote procedure call), Security assessment, Software security",
author = "Hyungwoo Kang and Lee, {Dong Hoon}",
year = "2007",
doi = "10.1007/978-3-540-71549-8_15",
language = "English",
isbn = "9783540715481",
series = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",
publisher = "Springer Verlag",
pages = "172--183",
booktitle = "Intelligence and Security Informatics - Pacific Asia Workshop, PAISI 2007, Proceedings",
note = "2007 Pacific Asia Workshop on Intelligence and Security Informatics, PAISI 2007 ; Conference date: 11-04-2007 Through 12-04-2007",
}