SHIELDS Project Approach (http://www.shields-project.eu)

1
SHIELDS Project Approach(http//www.shields-proje
ct.eu)

• TXT e-solutions SpA
• Domenico Rotondi
• Serenity Day June 17 - Brussels

2
Current situation

• Islands of security tools and methods

3
SHIELDS Approach

• Sharing security knowledge

4
SHIELDS Approach

• Security models
• Vulnerabilities
• Countermeasures
• Misuse and abuse
• Methods that use security models
• Tools that use security models
• Same model used in many ways

5
SHIELDS Approach

• A model based approach

Derived inspection rule Verify that there is a
range check associated with every data copy
Derived static analysis rule 'memcpy(d,_,l)' ?
verify(len(d) lt l)
Derived testing rule memcpy(d,s,_) ?
inject(len(s) gt len(d))
6
SHIELDS Consortium