語系:
繁體中文
English
說明(常見問題)
回圖書館首頁
手機版館藏查詢
登入
回首頁
切換:
標籤
|
MARC模式
|
ISBD
FindBook
Google Book
Amazon
博客來
Study of Outdated Cryptography Algorithms Posts of Stack Overflow.
紀錄類型:
書目-電子資源 : Monograph/item
正題名/作者:
Study of Outdated Cryptography Algorithms Posts of Stack Overflow./
作者:
Kharche, Shraddha.
出版者:
Ann Arbor : ProQuest Dissertations & Theses, : 2021,
面頁冊數:
48 p.
附註:
Source: Masters Abstracts International, Volume: 82-08.
Contained By:
Masters Abstracts International82-08.
標題:
Computer science. -
電子資源:
http://pqdd.sinica.edu.tw/twdaoapp/servlet/advanced?query=28259807
ISBN:
9798569981748
Study of Outdated Cryptography Algorithms Posts of Stack Overflow.
Kharche, Shraddha.
Study of Outdated Cryptography Algorithms Posts of Stack Overflow.
- Ann Arbor : ProQuest Dissertations & Theses, 2021 - 48 p.
Source: Masters Abstracts International, Volume: 82-08.
Thesis (M.S.)--University of Massachusetts Lowell, 2021.
This item must not be sold to any third party vendors.
There are many online forums where software developers involve themselves in technical discussions and one of the most popular platforms is Stack Overflow. Though these forums are helping developers to pass hurdle in their development process, many recent studies have shown that copying insecure code from these online forums is the leading cause of software vulnerabilities in applications. Even today, there are a number of posts on Stack Overflow that mention outdated algorithms like AES/ECB and they are still being viewed and up voted by users. Stack Overflow is a completely user driven platform and does not provide any mechanism which will alert users about the vulnerabilities associated with such algorithms. The aforementioned problems motivates us to study the Stack Overflow posts which has reference to outdated cryptography algorithms, and focus on answering two questions: Is it feasible to build a system that identifies weak cryptographic algorithms or hashing function and alert users? If a question contains weak cryptographic algorithms, do responders alert the users or do they simply focus on providing a working solution? To answer these, we have designed and developed a mary tree with a list of encryption algorithms and hashing functions available. We identified cryptographic algorithm keywords from posts text and traversed the tree, where tree leaves suggest if there is a need of potential warning or not. We applied this process both to posts questions and answers to analyze if the question and answers correlate by verifying if they traverse the same tree path. We ran our designed system against 6 million Stack Overflow Posts, which had 5169 cryptography related posts. We could successfully find several posts which had both questions and answers referring to outdated algorithms, and do not have any warnings from responders.
ISBN: 9798569981748Subjects--Topical Terms:
523869
Computer science.
Subjects--Index Terms:
Software developers
Study of Outdated Cryptography Algorithms Posts of Stack Overflow.
LDR
:03127nmm a2200421 4500
001
2342083
005
20211209144636.5
008
241004s2021 ||||||||||||||||| ||eng d
020
$a
9798569981748
035
$a
(MiAaPQ)AAI28259807
035
$a
AAI28259807
040
$a
MiAaPQ
$c
MiAaPQ
100
1
$a
Kharche, Shraddha.
$3
3680387
245
1 0
$a
Study of Outdated Cryptography Algorithms Posts of Stack Overflow.
260
1
$a
Ann Arbor :
$b
ProQuest Dissertations & Theses,
$c
2021
300
$a
48 p.
500
$a
Source: Masters Abstracts International, Volume: 82-08.
500
$a
Advisor: Narain, Sashank.
502
$a
Thesis (M.S.)--University of Massachusetts Lowell, 2021.
506
$a
This item must not be sold to any third party vendors.
520
$a
There are many online forums where software developers involve themselves in technical discussions and one of the most popular platforms is Stack Overflow. Though these forums are helping developers to pass hurdle in their development process, many recent studies have shown that copying insecure code from these online forums is the leading cause of software vulnerabilities in applications. Even today, there are a number of posts on Stack Overflow that mention outdated algorithms like AES/ECB and they are still being viewed and up voted by users. Stack Overflow is a completely user driven platform and does not provide any mechanism which will alert users about the vulnerabilities associated with such algorithms. The aforementioned problems motivates us to study the Stack Overflow posts which has reference to outdated cryptography algorithms, and focus on answering two questions: Is it feasible to build a system that identifies weak cryptographic algorithms or hashing function and alert users? If a question contains weak cryptographic algorithms, do responders alert the users or do they simply focus on providing a working solution? To answer these, we have designed and developed a mary tree with a list of encryption algorithms and hashing functions available. We identified cryptographic algorithm keywords from posts text and traversed the tree, where tree leaves suggest if there is a need of potential warning or not. We applied this process both to posts questions and answers to analyze if the question and answers correlate by verifying if they traverse the same tree path. We ran our designed system against 6 million Stack Overflow Posts, which had 5169 cryptography related posts. We could successfully find several posts which had both questions and answers referring to outdated algorithms, and do not have any warnings from responders.
590
$a
School code: 0111.
650
4
$a
Computer science.
$3
523869
650
4
$a
Computer engineering.
$3
621879
650
4
$a
Applied mathematics.
$3
2122814
650
4
$a
Web studies.
$3
2122754
650
4
$a
Information technology.
$3
532993
653
$a
Software developers
653
$a
Technical discussions
653
$a
Stack Overflow
653
$a
Software vulnerabilities
653
$a
Insecure code
653
$a
Outdated algorithms
653
$a
Algorithm keywords
690
$a
0984
690
$a
0489
690
$a
0464
690
$a
0646
690
$a
0364
710
2
$a
University of Massachusetts Lowell.
$b
Computer Science.
$3
3434885
773
0
$t
Masters Abstracts International
$g
82-08.
790
$a
0111
791
$a
M.S.
792
$a
2021
793
$a
English
856
4 0
$u
http://pqdd.sinica.edu.tw/twdaoapp/servlet/advanced?query=28259807
筆 0 讀者評論
館藏地:
全部
電子資源
出版年:
卷號:
館藏
1 筆 • 頁數 1 •
1
條碼號
典藏地名稱
館藏流通類別
資料類型
索書號
使用類型
借閱狀態
預約狀態
備註欄
附件
W9464521
電子資源
11.線上閱覽_V
電子書
EB
一般使用(Normal)
在架
0
1 筆 • 頁數 1 •
1
多媒體
評論
新增評論
分享你的心得
Export
取書館
處理中
...
變更密碼
登入